I have configured the LDAP interface on Cerberus. Login etc works well. I don’t like that LDAP users can change their password from the cerberus web interface therefore I disabled the option to change the password (“can change password” option unchecked on the group.) Normal users that are in the same group are not able to change the password anymore but users that come from the AD over LDAP are still able to do so. Could it be that this is a bug?