David, I have a setup where I have Cyrus is using saslauthd. Saslauthd is setup to use PAM. Pam is using PAM_LDAP and PAM_LDAP is authenticating against a MS AD domain controller. That was probably the long way around, but it made sense at the time. If you (or anyone else) is interested in how I did this let me know.