[SSSD-users] Re: [AD] Filter out disabled users

2019-09-11 Thread Hinrikus Wolf
Hi, that's actually what we tried: > [sssd] > domains = fsmpi.rwth-aachen.de > config_file_version = 2 > services = nss, pam > > [pam] > offline_credentials_expiration = 1 > offline_failed_login_attempts = 3 > offline_failed_login_delay = 0 > > [domain/fsmpi.rwth-aachen.de] > ad_domain =

[SSSD-users] Re: [AD] Filter out disabled users

2019-09-12 Thread Hinrikus Wolf
On Wed, Sep 11, 2019 at 3:05 PM Hinrikus Wolf > wrote: > > > ldap_search_base = > > dc=fsmpi,dc=rwth-aachen,dc=de?subtree?(&(objectClass=user)(!(objectClass=computer))(uidNumber=*)(unixHomeDirectory=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) > > Putting an (o

[SSSD-users] Re: [AD] Filter out disabled users

2019-09-14 Thread Hinrikus Wolf
s: > https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org > -- Hinrikus Wolf Fachschaft Mathematik/Physik/Informatik an der RWTH Aachen Telefon: Karmanstr: +49 241 80 94506 Infozentrum: +49 241 80 26741 f...@fsmpi.rwth-aachen.de https://www.fsmpi.rwth

[SSSD-users] Re: [AD] Filter out disabled users

2019-09-18 Thread Hinrikus Wolf
.freedesktop.sssd.Error.DataProvider.Offline] Best regards Rikus > Sumit Bose hat am 16. September 2019 18:01 geschrieben: > > > On Mon, Sep 16, 2019 at 10:37:11AM +0200, Hinrikus Wolf wrote: > > Hi, > > > > > > > Sumit Bose hat am 16. September 2019 08:

[SSSD-users] Re: [AD] Filter out disabled users

2019-09-16 Thread Hinrikus Wolf
S/project/code-of-conduct/ > > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > > List Archives: > > > https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org > > > > > > > > > -- > &g

[SSSD-users] [AD] Filter out disabled users

2019-08-09 Thread Hinrikus Wolf
Hi, we are currently running a Samba AD DC Server with sssd on clients. Now we want to run sssd also on our mail server with postfix + dovecot. Postfix and dovecot get their users from NSS i.e. from sssd. In our Domain there are several disabled users (via User Account Control Bit). Any of these