On Tue, 2011-12-20 at 12:13 +0200, Timo Sirainen wrote: > > I agree that the default should be changed to empty. > > But that also returns non-user results, like at least in my test setup > it returns an organization and admin. .. > Perhaps: iterate_filter = (uid=*)
Actually, the current default iterate_filter is fine, if you look at the default pass/user filters: #user_filter = (&(objectClass=posixAccount)(uid=%u)) #pass_filter = (&(objectClass=posixAccount)(uid=%u))
