NAME

       slapo-lastbind - lastbind overlay to slapd

SYNOPSIS

       ETCDIR/slapd.conf

DESCRIPTION

       The lastbind overlay to slapd(8) allows recording the timestamp of the last successful bind to entries in
       the  directory,  in  the authTimestamp attribute.  The overlay can be configured to update this timestamp
       only if it is older than a given value, thus  avoiding  large  numbers  of  write  operations  penalizing
       performance.  One sample use for this overlay would be to detect unused accounts.

CONFIGURATION

       The  config  directives that are specific to the lastbind overlay must be prefixed by lastbind-, to avoid
       potential conflicts with directives specific to the underlying database or to other stacked overlays.

       overlay lastbind
              This directive adds the lastbind overlay to the current database, see slapd.conf(5) for details.

       This slapd.conf configuration option is defined for the  lastbind  overlay.  It  must  appear  after  the
       overlay directive:

       lastbind-precision <seconds>
              The  value <seconds> is the number of seconds after which to update the authTimestamp attribute in
              an entry. If the existing value of authTimestamp is less  than  <seconds>  old,  it  will  not  be
              changed.   If this configuration option is omitted, the authTimestamp attribute is updated on each
              successful bind operation.

EXAMPLE

       This example configures the lastbind overlay to store authTimestamp in all entries in a database, with  a
       1 week precision.  Add the following to slapd.conf(5):

           database <database>
           # ...

           overlay lastbind
           lastbind-precision 604800

       slapd must also load lastbind.la, if compiled as a run-time module;

FILES

       ETCDIR/slapd.conf
              default slapd configuration file

SEE ALSO

       slapd.conf(5), slapd(8).  The slapo-lastbind(5) overlay supports dynamic configuration via back-config.

ACKNOWLEDGEMENTS

       This  module  was  written  in  2009  by  Jonathan Clarke. It is loosely derived from the password policy
       overlay.

OpenLDAP LDVERSION                                 RELEASEDATE                                 SLAPO-LASTBIND(5)