Re: OpenLDAP with ppolicy and SSSD configuration question.

[Turbo Fredriksson <turbo@bayour.com>]

On Nov 28, 2013, at 9:30 AM, Liam Gretton wrote:

> Now I use a custom 'lock' attribute on all accounts and use a LDAP filter at the client end. This is fine for our purposes but could be a problem for appliances that don't provide much in the way of LDAP configuration options.


I've used something similar to limit access on host level, but if
I remember correctly, such a filter would hide the account from
the system, not only lock it... ?
--
Imagine you're an idiot and then imagine you're in
the government. Oh, sorry. Now I'm repeating myself
- Mark Twain