I want only user "theuser" to login to this host.
I have tried the following in nslcd.conf:
pam_authz_search (&(objectClass=posixAccount)(IsActive=TRUE)(uid=theuser))
but all can login. If instead of pam_authz_search I use the "filter" command, it works, but getent returns only one user, the "theuser".
UPDATE: OS is ubuntu 12.10, I'm using libpam-ldapd NOT libpam-ldap