use Encode qw(decode);

    accessDenied($c, "Bad username or password.")
        if !$c->authenticate({username => $username, password => $password});

    if ($c->authenticate({username => $username, password => $password}, 'ldap')) {
        doLDAPLogin($self, $c, $username);
    } elsif ($c->authenticate({username => $username, password => $password})) {}
    else {
        accessDenied($c, "Bad username or password.")
    }

sub doLDAPLogin {
    my ($self, $c, $username) = @_;

    my $user = $c->find_user({ username => $username });
    my $LDAPUser = $c->find_user({ username => $username }, 'ldap');
    my @LDAPRoles = grep { (substr $_, 0, 5) eq "hydra" } $LDAPUser->roles;

    if (!$user) {
        $c->model('DB::Users')->create(
            { username => $username
            , fullname => decode('UTF-8', $LDAPUser->cn)
            , password => "!"
            , emailaddress => $LDAPUser->mail
            , type => "LDAP"
        });
        $user = $c->find_user({ username => $username }) or die;
    } else {
        $user->update(
            { fullname => decode('UTF-8', $LDAPUser->cn)
            , password => "!"
            , emailaddress => $LDAPUser->mail
            , type => "LDAP"
        });
    }
    $user->userroles->delete;
    if (@LDAPRoles) {
        $user->userroles->create({ role => (substr $_, 6) }) for @LDAPRoles;
    }
    $c->set_authenticated($user);
}

use YAML qw(LoadFile);
use Path::Class 'file';

            ldap => LoadFile(
		file($ENV{'HYDRA_LDAP_CONFIG'})
	    )