I've just installed 2.0.1 and configured the LDAP authentication. It allows anyone on our network to login without having the account created first, which is what I want, however the default user type appears to be 'administrator' :?

Is there somewhere that this setting can be changed? I've looked all around the system administration section and can't find any reference to 'new user's default type' or such.

As this is a new feature (being able to 'register' by logging in) would it be a good idea to have a settings page dedicated to LDAP user defaults? Where we could specify the different LDAP attributes for the user details like name=cn, email=mail, etc. Our company's LDAP server now has different attribute names than usual.

I was worried by your post so I tried it out myself. All the LDAP users I logged in as had an account created with the Anonymous role which appeared to be able to do absolutely nothing. When you look at the user roles, the first item in the Add Roles drop down box on the roles tab is Administrator. At first I thought the user was an Administrator too but they're not, it's just the first thing on the list.

I am having the same issue. All new users are created as administrators. Not something I want to happen

My mistake, they are actually anonymous role. Should of looked further into before posting