When we touch that component, I like to hear your requirements. Maybe they are easy to implement in one step all togther. And - of course - I can always use help, testing and tips :) No guarantee yet that I/we get the time and experience with XWiki to get any of the desired features done. (Caveat: I don't have an AD available for testing)
I've stated my understanding of Zeljko's requirement on the named wiki page http://www.xwiki.org/xwiki/bin/view/Idea/FilteringLDAPauthenticatedUsers . It's only the rudest beginning, since I had to leave for the day but I wanted something there to have an address to which to point and a seed of the idea. And Gunter, I'm sure that, with Microsoft's rigorous adherence to standards, you needn't worry about whether Active Directory will behave appropriately just as any LDAP implementation would. (I don't really need to tag the above sentence with something cute and geeky like <irony mood="bitter"> or an equivalent emoticon there, do I? Like most of my sort, I deplore stating the obvious, forgetting that one man's 'obvious' is another's 'inscrutable'...)
Please add your ideas to that XWiki page.
But of course...!
BTW: I plan to post a summary of the result to the list as soon as we have something more concret.
And perhaps a JIRA entry, if it looks like an enhancement that can be generally useful without unnecessarily complicating the lives of those who don't need it... brain[sic] PS Zeljko: In Hungary you do put given name first, correct? and socially it is proper to address or refer to someone by his given name? I'd love to see a phonetic spelling of your name, which to an Anglophone contains three consecutive consonants, though I know that 'j', descended as it is from the Greek iota, is effectively a vowel in some Eastern European languages... On the bright side, there's no chance of absent-mindedly typing a more familiar (to me) spelling as I did to Gunter.