Does pam_ldap check the attribute shadowInactive in LDAP directory during authentication?

[Latte Coffee-2]

I have a question about pam authentication on linux, does pam_ldap check the attribute shadowInactive in LDAP directory during authentication?

How does pam_ldap identicfy whether an user is already disabled or inactive?

 

Thanks,

Enson

[voegi]

set "loglevel 256" in slapd.conf and look/grep for "SRCH attr" in /var/log/debug.
Andi

Latte Coffee-2 wrote:

I have a question about pam authentication on linux, does pam_ldap check the
attribute shadowInactive in LDAP directory during authentication?
How does pam_ldap identicfy whether an user is already disabled or inactive?

Thanks,
Enson