Enrolment

No problem with your proposed change. On the other hand, I think LDAP enrolmente needs a rework. There are quite a few assumptions in the code that not always match what the users expect. There is also a big part of the LDAP auth code that could (IMHO should) be used by both plugins to make the enrolment part more flexible and have less assumptions.

I don't have a patch yet, but I plan to do it in the summer holidays

Saludos. Iñaki.