So getting back to the original post and discussion....
We could have the username separate from the email side of things and do LDAP lookup on that...
There would still be consistent logins throughout but would be easier for email changes for notification of PMs etc on forums etc.