You can already do this if you use RADIUS on the MikroTik and configure your RADIUS server to authenticate against an LDAP machine. Haven't acutally used a setup like this, so can't comment about the details... You could for example look at FreeRadius ( http://www.freeradius.org ), which has an LDA...