Hi,
I have applied the last section of this doc
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCa…
you).
So, in theory, users are created only in the main wiki. And it is the
desired behavior.
But in fact, an admin can create a local user (not connected to the LDAP) in
a subwiki. It is what I have done only to test the Meta-G feature.
If you know how to prevent local user creation, I'm interested.
More about my configuration :
Users don't have the right to read the main wiki (except their profil page,
of course).
Only users are imported from the LDAP, the groups are xwiki groups. The
principle to manage the rights of a subwiki is that the subwiki
administrator creates local group and inserts global users in it.
My installation is a XEM 2.3.1 upgraded in XEM 2.3.2 using the path rule to
distingish the different wikis.
Do not hesitate to ask me if you want more details.
Regards,
Maxime Mathieu