Use normal authentication for users for whom no LDAP account exists if orphans are allowed.