Local user registration

There is this setting “must approve users”, but I think it will conflict with your LDAP login.

Sounds like what you need is a feature request where you can white list users with specific email domains and all others would require approval.