Actually, FreeIPA&bind-dynd-ldap use idnszoneactive attribute (TRUE/FALSE) to define which zones are active and which are not.
On 09/04/2014 02:23 PM, Chris Whittle wrote: > Look at nsaccountlock if it's TRUE then they are disabled. > > > > On Thu, Sep 4, 2014 at 7:20 AM, Sebastian Leitz <[email protected]> > wrote: > >> Hello, >> >> I am trying to use bind-dyndb-ldap to connect my BIND to an LDAP server >> for zones. I have a tiny question regarding this and both the project >> website and the kind people on #freeipa IRC directed me to this list. I >> hope someone is here who can answer my question. Sorry for intruding if I'm >> not asking in the correct place. >> >> For technical reasons we need to be able to filter zones in LDAP according >> to some flags, e.g. 'enabled'. >> Other services usually provide a config option to include LDAP search >> filters in every query, like >> >> ldap_search_filter = (enabled=1) >> >> Unfortunately, I can't find anything like this in the README file of >> bind-dyndb-ldap. Does anybody know of a way to pass a search filter to LDAP? >> >> Thanks in advance, >> >> Sebastian >> >> -- >> Sebastian Leitz Mail: [email protected] >> ETES GmbH Fon : +49 (7 11) 48 90 83 - 14 >> Gablenberger Hauptstrasse 32 Fax : +49 (7 11) 48 90 83 - 50 >> D-70186 Stuttgart Web : http://www.etes.de/ >> >> Registergericht: Amtsgericht Stuttgart HRB 721182 >> Geschäftsführender Gesellschafter: Markus Espenhain >> Sitz der Gesellschaft: Stuttgart >> USt.-Id.Nr.: DE814767446 >> >> >> -- >> Manage your subscription for the Freeipa-users mailing list: >> https://www.redhat.com/mailman/listinfo/freeipa-users >> Go To http://freeipa.org for more info on the project > > > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
