It could be great if a plugin managing trac permissions is written ;)
See http://trac-hacks.org/wiki/LdapPlugin