I wish to have a site that allows for both LDAP authentication and plain old Drupal authentication (Drupal users without LDAP accounts). LDAP accounts will be employees, while Drupal accounts will just be all other types of users.
I foresee a problem with this in the future: What if a new employee is hired and the username (which is mandated by business rules) is already taken by an existing user. For example, a user "Jason Smith" created an account
jasons. A new employee "Jason Sutherland" is then hired and an LDAP account is created for him
jasons. Using the LDAP module http://drupal.org/project/ldap, the employee
jasons would essentially be locked out of our Drupal site. And no, we cannot ask the user to change their username.
What are my options here? I first thought of forcing LDAP accounts to login by their email, disallowing any users from registering with the suffix
@company.org. Since this should be unique, this could potentially solve the issue. Is this a viable solution? How could I do something like this? Would this require hacking the LDAP module a bit? Do I have other options?