1
vote
Accepted
sssd allows switching via su to users blocked from ldap_access_filter for users that can log in
I found the answer
ldap_user_search_filter = groupMembership=cn=devtest,ou=groups,ou=people,o=cuid
This made it so that only users that were in the group devtest could have their information polled ...
1
vote
Accepted
Samba4 User password is not updated correctly via LDAP message, only via smbpasswd
You need to specify account options via userAccountControl. It's a bitmask (documented at MS) that should have, at minimum, 512 for the NORMAL_ACCOUNT flag. If you don't specify, it defaults to 546 ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
ldap × 2749openldap × 688
active-directory × 640
linux × 344
authentication × 252
pam × 169
apache-2.2 × 132
ubuntu × 128
kerberos × 116
ssl × 112
samba × 112
centos × 106
sssd × 99
windows × 77
redhat × 72
ssh × 68
debian × 68
freeipa × 58
pam-ldap × 58
apache-2.4 × 56
postfix × 48
slapd × 48
windows-server-2008 × 47
php × 46
svn × 42