Yup. Basically, apps that do MS-specific LDAP queries to AD or something emulating it (Samba). It's also often useful for apps to be allow admin users to twea

Yup. Basically, apps that do MS-specific LDAP queries to AD or something emulating it (Samba). It's also often useful for apps to be allow admin users to tweak the actual LDAP queries in case they have a custom enterprise-wise schema. Stanford, for example, used AD as the "single source of truth" with another LDAP setup for *NIX. (In addition to a modified version of MIT Krb5 with AFS integrations.)