I recently had difficulty working with the Active Directory Integration plugin. In my case I needed to modify the way the plugin selected the user from LDAP because, even though it would sign in, it wouldn't be able to authenticate based on groups.
I've posted a modified version of the plugin so you can see what I changed link to the files.