When LdapExtLoginModule is stacked with BaseCertLoginModule or some other scenario, the username passed to LdapExtLoginModule can be a full DN. We need an option or options to allow this name to be parseable in order to use just one attribute or part of the name.