We now have two optional extras win32 or unix which will bring in the python kerberos lib only if needed
Ripped out all the LDAP code. It is best to use PloneLDAP instead and just enable that plugin for properties/groups information