Using PAM you can use the OGo account database to authenticate Cyrus mailboxes! That is, you don't necessarily need LDAP to accomplish a single password setup.