Am Friday 28 October 2005 16:00 schrieb Craig White: > does this match what is in padl's ldap.conf ?
Do you mean pam_ldap.conf? No, it doesn't: base ou=aktiv,ou=accounts,o=archipool,dc=arch,dc=uni-karlsruhe,dc=de libnss-ldap.conf uses base o=archipool,dc=arch,dc=uni-karlsruhe,dc=de The reason for this is that we're temporarily moving disabled accounts to ou=inakt,ou=accounts,o=archipool,dc=arch,dc=uni-karlsruhe,dc=de. Due to samba using the wrong search base, they're still able to log in (don't tell me to use sambaAcctFlags - I know they can be used for accomplishing the same thing). Bye, Jonas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba