Delegation of Authentication

Implement the "Delegation of Authentication" feature as described here: https://cwiki.apache.org/confluence/display/DIRxSRVx11/Delegation+of+Authentication. 

It is currently unknown as to whether this feature could be implemented rather simply as a custom authenticator, or whether this implementation would require virtual attributes (described by ticket #1067.)