[zmldapsync] Update ad example to exclude disabled accounts
This commit is contained in:
parent
21f86fd4e6
commit
d48035f728
|
@ -96,8 +96,8 @@ domains:
|
||||||
users:
|
users:
|
||||||
# Base DN where to look for users
|
# Base DN where to look for users
|
||||||
base: OU=People,DC=corp3,DC=net
|
base: OU=People,DC=corp3,DC=net
|
||||||
# Filter to look for users
|
# Filter to look for users. Note that this filter exclude locked user in AD. So if you lock it in AD it'll correctly be locked in Zimbra
|
||||||
filter: '(&(objectClass=user)(memberOf:1.2.840.113556.1.4.1941:=CN=Role_Mail,OU=Roles,DC=corp3,DC=net)(mail=*))'
|
filter: '(&(objectClass=user)(!(useraccountcontrol:1.2.840.113556.1.4.803:=2))(memberOf:1.2.840.113556.1.4.1941:=CN=Role_Mail,OU=Roles,DC=corp3,DC=net)(mail=*))'
|
||||||
# The attribute which uniquely identify a user. Usually either uid or sAMAccountName
|
# The attribute which uniquely identify a user. Usually either uid or sAMAccountName
|
||||||
# This attribute will be used as the user name in Zimbra (with the domain appended)
|
# This attribute will be used as the user name in Zimbra (with the domain appended)
|
||||||
key: sAMAccountName
|
key: sAMAccountName
|
||||||
|
|
Loading…
Reference in New Issue