On Tue, Apr 29, 2025 at 11:51:47AM +0000, Windl, Ulrich wrote: > Hi! > > Slapd-config states that pwdLastSuccess (provided by slapd) will be > set if olcLastBind is set to true. However to do that the lastbind > module/overlay is needed.
Hi Ulrich, it doesn't say that you need the overlay, does it? Can you point me to where if that's still the case? > But the latter sets authTimestamp. > Slapo-policy documents that authTimestamp (provided by lastbind > module) is set when lastbind is enabled. > > At it seems pwdLastSuccess and authTimestamp are set to the same value. > > Can someone explain the logic behind? I'm confused; do I really need > the lastbind overlay? pwdLastSuccess comes from ppolicy and as such when porting the lastbind functionality to core it was changed to support the draft v10+. Regards, -- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP
