diff --git a/lib/gitlab/ldap/user.rb b/lib/gitlab/ldap/user.rb
index c8e5d11447..078941b9de 100644
--- a/lib/gitlab/ldap/user.rb
+++ b/lib/gitlab/ldap/user.rb
@@ -10,6 +10,7 @@ module Gitlab
   module LDAP
     class User < Gitlab::OAuth::User
       class << self
+        # TODO: Look through LDAP servers until valid credentials are found?
         def authenticate(login, password)
           # Check user against LDAP backend if user is not authenticated
           # Only check with valid login and password to prevent anonymous bind results