使用WS网关和LDAP为Web服务提供AAA的最优雅，最有效的方法是什么？

I'm looking for the best way to provide authorization, authentication, and auditing to web services. I'll be using a web service gateway appliance deployed to the DMZ, and there will be an LDAP instance as a user store behind the firewall. How should it be built?I'm looking for the best way to provide authori