After first login of users using LDAP moodle sets wrong role. It sets "guests" but it should be at least "authenticated user". So the user is being asked to edit his profile but has no permission to do that - there is no need for these rights, when being in a guest status. This behaviour only takes places when one or more required profile fields (e.g. email) are not being mapped from original LDAP.