This plugin allows the administrator to specify the use of HTTP authentication for login.
Optionally, when the user successfully authenticates using HTTP authentication for the first time, a local record is created for them to hold their settings.
From then on the user is exactly the same as a local user, except that they still authenticate against HTTP authentication, i.e. they have no local password. However, HTTP users can still be blocked if desired, just like normal users. Optionally, local user registration can be disabled.
HTTP users cannot edit their passwords in the profile area.