online(a)mark.ziesemer.com wrote:
Full_Name: Mark A. Ziesemer
Version: 2.4.21 / HEAD
OS: Ubuntu Linux
URL:
ftp://ftp.openldap.org/incoming/smbk5pwd-shadow-b.patch
Submission from: (NULL) (2001:470:1f11:3ae:dc54:73ba:be16:148)
Using the PasswordModify Extended Operation (exop) along with the smbk5pwd slapd
overlay provides several benefits, but does not currently include the
shadowLastChange attribute of the shadowAccount class. This means the
shadowLastChange is missed from update, unless specially done along with a
PasswordModify.
While I agree that this could be useful in general I'd rather argue that for
Samba 3 'sambaPwdLastSet' should be set.
'shadowLastChange' is rather a POSIX account attribute which from my
understanding is out-of-scope for slapo-smbk5pwd. Well, the scope could be
extended...
Ciao, Michael.