If you're wed to AD and have a stupid password change policy
(Sarbannes-Oxley is inane in this regard -- this just encourages
lower-quality passwords, writing down passwords, etc -- and appears to have
been little more than corporate welfare for security/IT consulting companies
in this regard), then you might try mod_auth_sspi if you're running Apache
on Windows.
