I've been reading a lot about this topic but I could not reach a solution. I wanted to tell what I'm getting and show a little of what I've tried.
In our company, our Windows users are authenticated by Active Directory that is on a Windows Server 2003.
We use an open source mail server installed on Centos 6 for example Postfix with Cyrus Imap.
The goal is to get users to check their mail from any desktop application such as Thunderbird, Outlook, etc ... not have to enter the password again (sso).
Among the things I've tried was to use Postifix, Cyrsus Imap, Samba, librerias de clientes kerberos, GSSAPI, Thunderbird, Kerberos For Windows and as kdc which uses Windows Server 2003.
Now I'm thinking to try some other alternative. There are items that you get with NTLM but is accessed from a Web browse not from desktop applications.
I'm thinking that there is no solution to this problem or maybe I did not this seeing.
Has anyone been able to achieve something?, That way I recommend following?