On Tue, Dec 09, 2014 at 04:13:50PM +0100, Jakub Hrozek wrote:
ldap_id_mapping = false ldap_access_order = expire
A filter is only in effect if
Sorry, I left the sentence unfinished. The ldap and ad filter options are only in effect if the ldap_access_order contains filter. So my guess is that the ad_access_filter option was pretty much ignored.