As a really big approvement I would like to have openldap-support for authentication. We only needed the bound connection to an ldap-server via config/php-function, a lookup-feature for "uid" and "UserPassword" and a new property called "EBayPassword" or something that is alsolooked up by es-f.
If a new user logs in (exists inldap-server, but not in mysql), we should create this user in mysql. I think roundcube webmail does it the same way.
So we need the php-stuff and some ldap-schema-file which defines us the needed user-properties, especially EBayPassword.