People using the NTLM authentication scheme should disable autoUserCreation. We will wait one week before committing the patch to give people some time to change their configuration. Regards, Karel