On Dec 10, 2010, at 12:02 PM, Howard Chu wrote:

Good point. In that case it's probably fine as a separate overlay, the =

way it is now. Can we use the schema definition that Isode is using?

Not only yes, but hell yes. Reuse and convergence is a good thing.

( 1.3.6.1.4.1.453.16.2.188 NAME 'authTimestamp' DESC 'last successful authentication using any method/mech' EQUALITY generalizedTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE NO-USER-MODIFICATION USAGE dsaOperation )

And we use this attribute in our configuration object to enable/disable = (default disabled).

( 1.3.6.1.4.1.453.16.2.189 NAME 'authTimestamps' DESC 'enable recording of last successful authentication using = any method/mech' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE USAGE dsaOperation )