Dennis Leeuw wrote:
ldapsearch -x -LLL '(&(objectClass=device)(sambaAcctFlags=*S*))' dn
This revealed nothing. Which I knew for sure is incorrect.
AFAICS there's no SUBSTR matching rule defined for attribute type sambaAcctFlags. You could add
SUBSTR caseIgnoreIA5SubstringsMatch
to the attribute type description in the samba3.schema file if you really need it. Bear in mind this is a local patch to a file shipped with upstream code.
Ciao, Michael.