> I have a LDAP directory with user accounts in it (surprise, eh?). We > have Linux and Windows Clients with a Samba-PDC with LDAP behind it. > Linux users are authenticated via pam_ldap. > My question is: Is there a smart way to disable an account in such a way > that pam_ldap AND Windows don't let them login anymore?
Easy, create an ACL that hides the account from the NSS bind context if it matches certain criteria (such as "activeaccount: N" or some such). > A second > question is how to set account expiration in LDAP? Samba provides a mechanism to do this on its own; otherwise I suspect it would be a function of the password policy overlay. --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.
