RequestTracker and Active Directory

Why isn’t it easier? RT is very cool, but it seems that every time you want to integrate something to AD, it sucks in its own way.