Hello -pekr-,
thanks a lots for you comments. As you see this confusion stems for the fact that we have the 'local' users and the LDAP stored users (if we have user modules enabled).
Maybe the solution would be show both types of users in the user screen?. But in this case other problem arise: you cannot do th same operations with 'local' user than with LDAP users (and some local users you would not be allowed to modify at all). This will also be confusing, but it will be less or it will be more than the actual situation?. The work to arrange a solution along this lines will be worth or not?
Hmm, difficult to say, as I am not able to foresee all the consequences. The main reason why I objected, was because of my lack of understanding from docs. So first time I did install the system, I entered "pekr" user as an admin. But then, of course, I wanted to have emails, aliases configured. So I tried to add it in LDAP, but system did not allow me to. So my opinion in general is:
1) Improve eventually docs. One or two sentences, stating you are entering local administrator account, which you will not be able to modify/configure easily later.
2) Allow the same name to exist, as an LDAP user. But here, I am not sure it is possible, and I am not sure, it would not be confusing. Because having two "pekr" users in the system, one being local admin, the second one being regular user, is not probably good aproach. E.g. what about emails going to local admin - would those two names share the same one? Or is LDAP user still a regular system user, so we can't have two users of the same name, one being local, one in LDAP?
3) You have System/main section, which server for some general settings purposes. You could add new section here - local admin, allowing to enter new users here, being local admins, plus their respective configuration, which is different from LDAP needs
4) The most complex - during the user set-up, choose if the user is in LDAP or local. Then in user list, one column would differentiate it by "local" | "LDAP" text. But this solution might turn being complex, and maybe 3) is easier solution ...
Best regards,
Petr