if you work with eu_ldap you can choose the option "Enable authentication against LDAP only. If checked, users not found in the directory may not log on." when you check the box you can only authenticate against ldap, when you don't check the box you can authenticate against ldap and typo3 best regards