Kerberos vs. LDAP for authentication -- any opinions?

[cyberp70@yahoo.com]

At the risk of starting a religious war....

We currently use Kerberos for authentication for almost everything
on our network.  Some people here are advocating switching to using
LDAP for authentication (we already have a pretty well developed LDAP
infrastructure).  This would of course require everyone to change
their password as well the trauma of recoding applications that
currently use Kerberos and haven't been converted to using PAM.

Anyone have any pointers to information about the relative merits
of using Kerberos or LDAP for authentication in a large heterogeneous
environment?

Any info is, of course, greatly appreciated.

- C

--
Email:  cyberp70 at yahoo.com