summaryrefslogtreecommitdiffstats
path: root/server
diff options
context:
space:
mode:
authorJonathan Bauer2015-08-04 13:19:36 +0200
committerJonathan Bauer2015-08-04 13:19:36 +0200
commit90adbca9d3478bc33d536c0bce7d9d16c0475697 (patch)
treec15723387b87aed47eeb07ca2d918c2cf1f70dcc /server
parent[vmware] vmware.conf now written with maxhardwareversion, version and buildve... (diff)
downloadtm-scripts-90adbca9d3478bc33d536c0bce7d9d16c0475697.tar.gz
tm-scripts-90adbca9d3478bc33d536c0bce7d9d16c0475697.tar.xz
tm-scripts-90adbca9d3478bc33d536c0bce7d9d16c0475697.zip
[server] do not allow login of disabled accounts :)
Diffstat (limited to 'server')
-rw-r--r--server/modules/auth-freiburg/etc/sssd/sssd.conf5
1 files changed, 2 insertions, 3 deletions
diff --git a/server/modules/auth-freiburg/etc/sssd/sssd.conf b/server/modules/auth-freiburg/etc/sssd/sssd.conf
index c5c63953..27b340f2 100644
--- a/server/modules/auth-freiburg/etc/sssd/sssd.conf
+++ b/server/modules/auth-freiburg/etc/sssd/sssd.conf
@@ -25,10 +25,9 @@ ldap_tls_reqcert = never
ldap_schema = rfc2307bis
ldap_uri = ldaps://ldap.ruf.uni-freiburg.de
ldap_backup_uri = ldaps://bv1.ruf.uni-freiburg.de,ldaps://bv2.ruf.uni-freiburg.de,ldaps://bv3.ruf.uni-freiburg.de
-ldap_group_search_base = ou=group,dc=uni-freiburg,dc=de
-ldap_user_search_base = ou=people,dc=uni-freiburg,dc=de
-ldap_user_home_directory = rufClientHome
ldap_search_base = ou=people,dc=uni-freiburg,dc=de
+ldap_user_search_base = ou=people,dc=uni-freiburg,dc=de?onelevel?(rufstatus=enabled)
+ldap_user_home_directory = rufClientHome
# Note that enabling enumeration will have a moderate performance impact.
# Consequently, the default value for enumeration is FALSE.
# Refer to the sssd.conf man page for full details.