Support people in LDAP.

Some sites require the ability to authenticate people to systems who may
not have accounts.

Change-Id: Iefc0c941843cab168179d20f7f5f4ff63366c322