We've been looking into ways to get our client's Sitecore (6.4.1 rev. 110720) hooked up to their Active Directory setup. The first thing we came across was the LDAP module for Sitecore. The client likes the "Live Validation Mode" of the LDAP connector, so we started looking into that. However, it became quickly clear that SDN shows that they haven't tested the LDAP module with Sitecore 6.x.
Then we found the AD module, which is clearly made for Sitecore 6.x. However, it seems to always operate in what the LDAP module documentation called "Mixed Mode" (that is, a robust 2-way sync of users and roles).
I have two questions. Does the LDAP module work on Sitecore 6.x? If not, is there a way to configure the AD module to only sync roles/groups?