On Dec 10, 2010, at 5:16 PM, Michael Str=F6der wrote:

Kurt@OpenLDAP.org wrote:

...

( 1.3.6.1.4.1.453.16.2.188 NAME 'authTimestamp' DESC 'last successful authentication using any method/mech' EQUALITY generalizedTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE NO-USER-MODIFICATION USAGE dsaOperation ) =20 And we use this attribute in our configuration object to =

enable/disable =3D

...

(default disabled). =20 ( 1.3.6.1.4.1.453.16.2.189 NAME 'authTimestamps' DESC 'enable recording of last successful authentication using =3D=

...

any method/mech' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE USAGE dsaOperation )

=20 Hmm, isn't NAME of the second a little bit confusing since it sounds =

like just

the plural of the first?

Names should only be for the wire, the wire doesn't get confused.

-- Kurt=