This is (I believe) already implemented. Look for the "auth_user_info" service contract. For an example, look at the auth-ldap package.

/Lars