I would also support the fact that big companies are still using NTLM for non-critical resources (as a convenience). This is also my goal here (to protect a non-critical resource).
> For the future, the way to go is Kerberos; this is what Microsoft is pushing > in replacement for NTLM. Any good literature for setting up Linux (with Apache) with Kerberos for SSO with Windows Clients? %)