Using Operational Attribute Value in Filter

[ab@novell.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

True!

Good luck.





David Gersic wrote:
> On Wed, 21 Oct 2009 11:40:04 +0000, ab@novell.com wrote:
>
>> The attribute 'loginDisabled' is probably what you are after, and it is
>> a regular attribute on the object:
>>
>> 'loginDisabled=FALSE'
>
> Note that the OP asked for disabled accounts, so he needs
> "logindisabled=true" there. Also note that loginDisabled is a tri-state
> attribute. It can be True, False, or not present. If not present, it is
> treated as if it were False. So a query for "enabled" accounts needs to
> take this in to account. Searching only for "false" doesn't work, you
> need to search for "not true".
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJK3xJbAAoJEF+XTK08PnB5pAkQAMoWaR69a2 cKAhNOXlhvdOwe
ZIc9xiL5/+HGNSEUEUzYfSsLCHp7nhSzHTu89VY+tg79ASRx3W1A9VFEDw2 Mb6hC
rzMZJ/umajc66o4kJ2BnTTug/4CVF1y5A5vsE4fQ9OREl/x2VB7cUEYmIOfsR4FT
CZvtnko4cxJbKtDAM45QCFjDcm7DX3hH7e+WGWlBl9WQdsyrpH 38J98fWA30y5qG
e0h86x0Oaly4kXVZpe7uF9kGAPmewjousmkKujYjjKv6MOB+fh RGoe+OnlJXJjxa
qO9rf8bzMnlP1meIovVuq5YE6ijeJI6IX+jG3O4Y4qcv+CjSgF DWiE35p6X5+eMF
PndClgboyaZj2LIQvaB2u2MEf7XWbu41LotAzUPll8SlTq1pji z0R4HQzelroikI
TtOMIjUqTwsEUaKMau7u0sJshmng8leF7gC8gt81pEt6CtMQrv 8Ol04Xsg4n9dGl
igPN3Qx77bj0aLwAUc50tb/gnLReyvIxgkGAJhlKgY3pnQNK1mCL5cjuFlh3hLXN
bmlxr6yf0PEGaQXmL8KaTEbJfw6QQkspTqtxdhSDpZ2vAz5L4d RiZvHqgzdKi7AL
BBd5HLmHNbnR8j1EBS1SlwEvliLTOb+zCPgKPJHLkPYzz8A8xg wmA31GgoMd8GlG
pzYXWAfK2dVCzlkWrZoJ
=LtH/
-----END PGP SIGNATURE-----