LDAP groups => roles without requiring LDAP authentication module

This issue has come up before, with this issue:

http://drupal.org/node/318174

My client uses LDAP for user authorization, but uses Kerberos via pubcookie for authentication. They have informed me that password information in the LDAP directory is not authoritative, so I decided to try using the pubcookie module. However, this module does not map LDAP groups to roles, not to mention that it does not support the content_profile module, whereas ldap integration does, with the appropriate patch. However, LDAP integration does not use Kerberos for authentication.

I need to be able to query LDAP for an authenticated user's group information and attach the appropriate roles to that user's account at account creation. In the issue referenced above, a patch was submitted that removed the need for ldapauth when using ldapgroups, but the module author questioned the usefulness of that feature. I respectfully submit that this feature is useful, and would appreciate it if it were added to the module.