Hi David,

On 04/15/16 15:11, David Kupka wrote:
> 
> Hello Harri,
> 
> the attribute you're looking for is 'nsaccountlock'. This command should give 
> you uids of all disabled users:
> 
> $ ldapsearch -LLL -Y GSSAPI -b cn=users,cn=accounts,dc=example,dc=test 
> "(nsaccountlock=TRUE)" uid
> 

Thats exactly what I was looking for. For the record: Searching for
"nsaccountlock=FALSE" did not work. I had to use

ldapsearch -LLL -Y GSSAPI -b cn=users,cn=accounts,dc=example,dc=test 
'(!(nsaccountlock=TRUE))' uid

instead.


Thanx very much for your help
Harri

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to