If your application runs on Linux but has a SQL Server back end does anyone know how to get it to use AD?  I know some apps allow it through a library called krb5 but don't know the specifics.
I think this is another area that forces DBAs or domain admins to become policemen.  In the security sphere I feel that too much is left to best endeavours with unrecorded lines of responsibility.