I'm wondering if it possible by configuring server (without wring a new login module) to do following.

I have LDAP with users, passwords, groups etc. And I also I have DataBase with set of possible roles.
Is it possible to authenticate user using LDAP and assign him a set of roles according user's groups, or whatever information I have in LDAP, using roles-groups mapping table in DataBase?

I know that it is possible if you have roles-users mapping table in DB, but I don't want to keep user's name in DB, only groups.