The main decisions here are around configuration, eg the creation and deployment of Kerberos credentials for an LDAP service principal.
RFC 2222 - Simple Authentication and Security Layer (SASL)
http://www.faqs.org/rfcs/rfc2222.html
RFC 2078 - Generic Security Service Application Program Interface, Version 2
http://www.faqs.org/rfcs/rfc2078.html