A script that can be used in conjunction with collective.recipe.plonesite to disable LDAP

disable_ldap.py

# id of the ldap plugin the PloneSite/acl_users
ldap_plugin_id = "ldap-plugin"
# turn off the ldap plugin for local testing
interfaces = [
  "IAuthenticationPlugin",
  "ICredentialsResetPlugin",
  "IGroupEnumerationPlugin",
  "IGroupsPlugin",
  "IPropertiesPlugin",
  "IRoleEnumerationPlugin",
  "IRolesPlugin",
  "IUserEnumerationPlugin"
]
# this code is mostly taken from
# Products.PluggableAuthService.plugins.BasePlugin.manage_activateInterfaces
ldap_plugin = portal.acl_users[ldap_plugin_id]
pas_instance = ldap_plugin._getPAS()
plugins = pas_instance._getOb('plugins')
active_interfaces = []
for iface_name in interfaces:
    active_interfaces.append(plugins._getInterfaceFromName(iface_name ))

for iface in active_interfaces:
    try:
        plugins.deactivatePlugin(iface, ldap_plugin_id)
    except KeyError:
        print "%s plugin already disabled for %s" % (iface, ldap_plugin_id)