Hi David, On 04/15/16 15:11, David Kupka wrote: > > Hello Harri, > > the attribute you're looking for is 'nsaccountlock'. This command should give > you uids of all disabled users: > > $ ldapsearch -LLL -Y GSSAPI -b cn=users,cn=accounts,dc=example,dc=test > "(nsaccountlock=TRUE)" uid >
Thats exactly what I was looking for. For the record: Searching for "nsaccountlock=FALSE" did not work. I had to use ldapsearch -LLL -Y GSSAPI -b cn=users,cn=accounts,dc=example,dc=test '(!(nsaccountlock=TRUE))' uid instead. Thanx very much for your help Harri -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
