Use first mail address if LDAP provides more than one.

app/coffee/Features/Authentication/AuthenticationManager.coffee

@@ -29,7 +29,9 @@ module.exports = AuthenticationManager =
         callback null, null
 
   ldapAuthenticate: (ldapUser, callback = (error, user) ->) ->
-		User.findOneAndUpdate {email: eval('ldapUser.' + Settings.ldap.emailAtt)}, {first_name: eval('ldapUser.' + Settings.ldap.nameAtt), last_name: eval('ldapUser.' + Settings.ldap.lastNameAtt), hashedPassword: ldapUser.userPassword, ldap: true}, {new: true, upsert: true, setDefaultsOnInsert: true}, (error, user) =>
+    ldapMail = eval('ldapUser.' + Settings.ldap.emailAtt)
+    mail = if Array.isArray(ldapMail) then ldapMail[0] else ldapMail
+    User.findOneAndUpdate {email: mail}, {first_name: eval('ldapUser.' + Settings.ldap.nameAtt), last_name: eval('ldapUser.' + Settings.ldap.lastNameAtt), hashedPassword: ldapUser.userPassword, ldap: true}, {new: true, upsert: true, setDefaultsOnInsert: true}, (error, user) =>
       return callback(error) if error?
       if user?
         callback null, user