For a given connection you either authenticate locally or via an external server (like LDAP). That is, if you do one then you do not do the other.
The method is set in the tunnel-group section of the ASA configuration with the "authentication-server-group" command