So after a few weeks, I finnaly tracked down a random MSIE issue with my RT installation to the Authen::NTLM and its cousin Authen::NTLM::Cookie modules. These are several years old, and were causing me issues with POSTs to RT when updating tickets, etc, as well as various login issues when using IE randomly.
So, falling back to mod_ldap.