[Samba] Account locked and delayed user data propagation...

[Marco Gaiarin]

Mandi! Rowland penny via samba
  In chel di` si favelave...

> You cannot create an ldap filter using the above, you would have to filter
> the result of the ldap search.

I can confirm:

	root at vdcsv1:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b DC=ad,DC=fvg,DC=lnf,DC=it '(&(objectClass=user)(sAMAccountName=gaio))' msDS-User-Account-Control-Computed
	# record 1
	dn: CN=gaio,OU=Users,OU=SanVito,OU=FVG,DC=ad,DC=fvg,DC=lnf,DC=it
	msDS-User-Account-Control-Computed: 16
	[...]
	# returned 4 records
	# 1 entries
	# 3 referrals

	root at vdcsv1:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b DC=ad,DC=fvg,DC=lnf,DC=it '(&(objectClass=user)(msDS-User-Account-Control-Computed:1.2.840.113556.1.4.803:=16))' msDS-User-Account-Control-Computed
	[...]
	# returned 3 records
	# 0 entries
	# 3 referrals

there's no bitwise operator.

Aniway, i think it is better to use msDS-User-Account-Control-Computed
value in script, instead or trying to replicate the behaviour.


Thanks to all!

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)