if you write the necessary GL functions to do this, I'd be more than happy to add them to some sort of Geeklog authentication module. We will be allowing for LDAP authentication among other things in the rewrite.
The reason people blame things on previous generations is that there's only one other choice.