I've disabled an account in FreeIPA using the UI and I don't see any changes in the directory. Are there supposed to be changes there or is this something that is accomplished in Kerberos? I was hoping to be able to search the directory for disabled accounts. Steve