As an additional use case it should be possible to bind with 'uid=?' (? filled by username) and password. gathering role information out of LDAP by a specific attribute could also be used to set the role. The applied patch relates to https://review.typo3.org/7006 and is meant to be a proposal.