Couldn't a client-side solution like accountlogon solve the problem?
Of course the client ought to be in Perl, and thus portable across a range of OS'es...
(There doesn't seem to be any such module available on CPAN tho...)
-- allan