New subject: [xwiki-users] Subwiki - How to prevent automatic local user creation ?

13 Nov 2014

Hi.

I've the following configuration:

* XWIki Enterprise 5.4.5 with path-based subwikis
* Main wiki using LDAP (AD) authentication
* Subwiki with "both local and global users"

I'm trying do configure it so, that Global users will be authenticated
by AD (possibly with some AD-to-Wiki group mappings) and Local users
will be authenticated against xwiki database.

It's almost working. If the Global user is logged in to the main wiki
and then goes to the subwiki - he/she can use it as Global user (which
can be checked looking at the 'profile' or 'preferences' urls included
in the heading bar).
But if the user without prior logging to the main wiki goes straight to
subwiki and enters his AD credentials - a new Local user is being created.

Is there a way to prevent the Local user creation? I suppose, that
changing xwiki.authentication.ldap.trylocal to '0' in xwiki.cfg is not
the solution - I'll lose the ability to have local users in subwiki, right?

In the main wiki it is desire'able, it allows easy joining for each AD
user.

TIA,

R.