Scope to get nsaccountlock

src/Config/auth.php

@@ -98,6 +98,10 @@
         // Only allows users with a uid to authenticate.
         // Suitable when using OpenLDAP.
         // Adldap\Laravel\Scopes\UidScope::class,
+
+        // Fetch the userAccountControl attibute
+        // This is needed on FreeIPA to determine if an user is disabled
+        // Adldap\Laravel\Scopes\UserAccountControlScope::class,
 
     ],
 

src/Scopes/UserAccountControlScope.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace Adldap\Laravel\Scopes;
+
+use Adldap\Query\Builder;
+
+class UserAccountControlScope implements ScopeInterface
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function apply(Builder $builder)
+    {
+        $builder->select($this->getSelectedAttributes($builder));
+    }
+
+    /**
+     * Retrieve the attributes to select for the scope.
+     *
+     * This merges the current queries selected attributes so we
+     * don't overwrite any other scopes selected attributes.
+     *
+     * @param Builder $builder
+     *
+     * @return array
+     */
+    protected function getSelectedAttributes(Builder $builder)
+    {
+        $selected = $builder->getSelects();
+
+        return array_merge($selected, [
+            $builder->getSchema()->userAccountControl(),
+        ]);
+    }
+}