LDAP authentication is handled simply by binding to the directory as the user you are attempting to authenticate. Other than the uesrname they entered there isn't any other information available about them. If you want to get information about them from the LDAP directory, the usual way to do that is to create a role account that the application can use to connect to the directory and query it for that information.