search for: nss_schema

...it Cancel-Job> Order deny,allow Require user @OWNER @SYSTEM </Limit> </Policy> ====ldap.conf==== uri ldap://10.1.2.203 base dc=something bind_policy soft idle_timelimit 3700 pam_lookup_policy yes pam_password exop nss_initgroups_ignoreusers root,ldap nss_schema rfc2307bis nss_map_attribute uniqueMember member ssl start_tls ldap_version 2 pam_filter objectclass=posixaccount nss_base_passwd ou=Users,dc=something nss_base_shadow ou=Users,dc=something nss_base_group ou=NTGroups,dc=something tls_checkpeer no

I don't want to call this a security problem. Since it isn't a code exploit, but, many people might have this problem. The other day a user was removed from our SLES samba-3.0.28-0.6 domain due to inactivity, but he still needed his account, so I recreated it. I didn't try to restore the LDAP data, so he got a new SID, etc. I was amazed to find that once his userid was created,