I'm looking to implement LDAP authentication againt Active Directory for my Postgresql databases. What's people experiences of using LDAP for authenticating logins with AD? Is it easy to setup and is there anything to watch out for e.g. does Postgresql do anything intrusive on Active Directory (create anything) or does it just simply bind to AD, validate the username/password pair and return success/failure back to the client?