[389-users] disabled user attribute

[Mark Reynolds]

Hi Alberto,

We use "roles" for activating/disabling entries:

When a user is disabled, it is added to "disabled group":  
cn=nsmanageddisabledrole,dc=example,dc=com

audit log:

dn: uid=scarter,ou=People,dc=example,dc=com
changetype: modify
add: nsRoleDN
nsRoleDN: cn=nsmanageddisabledrole,dc=example,dc=com

So to find all disabled users you can just search on:  
"nsRoleDN=cn=nsmanageddisabledrole,dc=example,dc=com"

Mark

On 05/11/2012 10:51 AM, Alberto Viana wrote:
> I have an 389 DS server 1.2.10 and I disabled/inactivated  a user just 
> for test (via 389 console) but I could not find what attribute was 
> modified with this change. I need to know how to identify a 
> disabled/inactivated user.
>
>
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20120511/02316235/attachment.html>