BF:SECURITY We didn't check if the user exists into DB prior trying to bind to LDAP.
ER:We now support complex LDAP authentication scheme where a LDAP path for each user is stored into DB.