I tend to walk the "roll your own" path myself. Call me creative or call me crazy, I'm OK with either definition :) I've put together a code base for web applications. The back end user authentication is modular, and the web front end includes built in tools for login and user management (add, delete, list, reset password, etc). All it needs is an LDAP authentication module, and it's pretty much a ready to go web enabled LDAP manager right out of the box. How simple or complex you make it after that is up to you. Creating a new LDAP authentication module is as simple as filling in the function stubs (add user, delete user, list users, etc). Send me a PM if you want to take a look.