[opensuse] Disabling accounts in OpenLDAP