[RESOLVED] LDAP Disabled Accounts

[khaine]

I hope this is a simple one. I am attempting to pull all the names out of LDAP that is connected to NDS7 where there's a telephone number. I have that bit working fine. However I am also pulling names out from accounts that are disabled. I have read some information about userAccountControl but it all seems to be for setting values not returning values. I have done a general attribute dump and not got anything that looks even remotely like it could be for marking an account as disabled.

List of what I do get.

objectclass
--count=>4
--0=>top
--1=>person
--2=>organizationalPerson
--3=>inetOrgPerson
0=>objectclass
revision
--count=>1
--0=>3112
1=>revision
mail
--count=>1
--0=>[e-mail]
2=>mail
givenname
--count=>1
--0=>firstname
3=>givenname
sn
--count=>1
--0=>Surname
4=>sn
count=>5
dn=>cn=logname,ou=oubit1,ou=oubit2,o=comp

Anyone got any idea as to how to spot a disabled account?

[khaine]

Self fixed.

This is not a LDAP issue it is infact an NDS issue. It is possible within NDS admin to specify which attributes are passed to the LDAP server. We simply added Login Disabled to the attributes passed to the server and it works exactly as we want.