On Tue, 2011-12-20 at 10:47 +0200, Nikolaos Milas wrote: > On 20/12/2011 10:15 πμ, Timo Sirainen wrote: > > > Try adding (objectClass=posixAccount) as filter in the ldapsearch. > > That's the default iterate_filter. > > We've caught it! Only the returned (30) accounts include the > posixAccount objectClass! > > So I added in the LDAP setup: > > iterate_filter = (objectClass=*) > > and now everything works fine!
Isn't that basically the same as an empty filter? What other types of objectClasses are there with user accounts? Perhaps the default should be changed to empty, or maybe to (uid=*)
