LDAP Integration
to assign users imported by active directory to different user types (pamonly, pamlimited\&rpam or pam\&rpam) , the administrator must fill in the external user attribute in the advanced filter section of the add new ldap server sub screen on the ldap integration screen external user attribute field accepts the attribute name entered by the administrator after the administrator fills the attribute name (e g , isexternal ) in the text field, kron pam imports ldap users with different user types by considering the attribute's values this attribute's possible values should be external or true or 1 for indicating pamlimited\&rpam user type, or internal or false or 0 for indicating other user types for example, if this attribute’s name is isexternal , the value of the attribute shows whether the user type is pamonly , pamlimited\&rpam or pam\&rpam · if the value is external or true or 1 , the user type is assigned pamlimited\&rpam to the target user, and both external user count and user count values are increased by 1 · if the value is internal or false or 0 , and if the target user’s group has pam\&rpam parameter with true value, the user type is assigned pam\&rpam to the target user, and both rap user count and user count values are increased by 1 · if the value is internal or false or 0 , and if the target user’s group has pam\&rpam parameter with false value, the user type is assigned pamonly to the target user, and user count value is increased by 1