When placed before an LDAP module, the Persistent Cookie module can authenticate before referring to an LDAP data store such as OpenDJ.