DIGEST-MD5 and Active Directory

How would one configure OpenFire to authenticate against Active Directory using DIGEST-MD5? I specifically do not want to use Kerberos.

Thanks in advance,

Matt

Any help is appreciated. I am forcing digest by using the <sasl> xml in openfire.xml, but it doesn’t seem to be sufficient. Am I missing something obvious? When plain is allowed, it works fine.