On Tue, Dec 09, 2014 at 04:13:50PM +0100, Jakub Hrozek wrote:
> ldap_id_mapping = false
> ldap_access_order = expire
A filter is only in effect if
Sorry, I left the sentence unfinished. The ldap and ad filter options
are only in effect if the ldap_access_order contains filter. So my guess
is that the ad_access_filter option was pretty much ignored.