From 061012dd2a193206fc4e78621595da7f0eec5cad Mon Sep 17 00:00:00 2001 From: Nicolas Vigier Date: Fri, 7 Jan 2011 15:09:52 +0000 Subject: remove shadowExpire from filter --- modules/restrictshell/templates/ldap-sshkey2file.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/restrictshell/templates/ldap-sshkey2file.py b/modules/restrictshell/templates/ldap-sshkey2file.py index bd369266..af29a203 100755 --- a/modules/restrictshell/templates/ldap-sshkey2file.py +++ b/modules/restrictshell/templates/ldap-sshkey2file.py @@ -20,7 +20,7 @@ binddn="cn=<%= fqdn %>,ou=Hosts,%s" % basedn pwfile="<%= ldap_pwfile %>" # filter out disabled accounts also # too bad uidNumber doesn't support >= filters -filter="(&(objectClass=inetOrgPerson)(objectClass=ldapPublicKey)(objectClass=posixAccount)(sshPublicKey=*)(!(shadowExpire=*)))" +filter="(&(objectClass=inetOrgPerson)(objectClass=ldapPublicKey)(objectClass=posixAccount)(sshPublicKey=*))" keypathprefix="<%= pubkeys_directory %>" def usage(): -- cgit v1.2.1