As a rule of thumb, when users leave our company, via the admin interface I set their accounts to be inactive; is there a way to query the ldap to see what objects are inactive; I guess what I'm really asking is, what attribute do I look for when querying the database. Thanks. Aaron Confidentiality Notice: The information contained in this electronic message is intended for the exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.fedoraproject.org/pipermail/389-users/attachments/20061002/4b52bc3b/attachment.html