ric79 is seeking a solution to approve external users with personal emails before they can post or see the forum, while allowing colleagues authorized via LDAP to access the forum without restrictions.
blake suggests that the “must approve users” setting may conflict with LDAP login and proposes a feature request to whitelist users with specific email domains. blake also shares a related meta discussion on the topic.
ric79 implements a workaround by creating a “userOK” group, where LDAP users are added automatically, and external users must email him to be added to the group. All categories are restricted to the “userOK” group.
codinghorror points out the existence of an “email domains whitelist” site setting, but notes that it does not bounce non-whitelisted domains to approval. blake clarifies that ric79 still wants to allow registration for non-whitelisted domains, but with approval required.