Hi
Kerberos, NTLM and LDAP authentication against an Active Directory server are using the same information. You can pull out groups and users using LDAP but configure authentication for NTLM. This will give you what you want.
There are a couple of people using this approach.
If you are not using Active Directory you are a bit stuck. CIFS requires NTLM on the back end - this is a real NTLM passthrough or an authentication component that can get hold of the MD4 hash of the password. I know this is a bit weak, but that it is what is required at the bottom of the NTLM stack.
Hope this helps
Regards
Andy