Does pam_ldap check the attribute shadowInactive in LDAP directory during authentication?

View: New views
2 Messages — Rating Filter:   Alert me  

Does pam_ldap check the attribute shadowInactive in LDAP directory during authentication?

by Latte Coffee-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I have a question about pam authentication on linux, does pam_ldap check the attribute shadowInactive in LDAP directory during authentication?
How does pam_ldap identicfy whether an user is already disabled or inactive?
 
Thanks,
Enson

Re: Does pam_ldap check the attribute shadowInactive in LDAP directory during authentication?

by voegi :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

set "loglevel 256" in slapd.conf and look/grep for "SRCH attr" in /var/log/debug.
Andi

Latte Coffee-2 wrote:
I have a question about pam authentication on linux, does pam_ldap check the
attribute shadowInactive in LDAP directory during authentication?
How does pam_ldap identicfy whether an user is already disabled or inactive?

Thanks,
Enson