One of the application developer is asking me for the attribute that holds the last logon timestamp so that he could run a report. Since it is an operational attribute would he able to retrieve it for his application? Thank you so much.


On Nov 6, 2012, at 12:20 PM, "Clément OUDOT" <clem.oudot@gmail.com> wrote:




2012/11/6 jeevan kc <jeev_biz@hotmail.com>
Hello now I have a question. Is there any way that we can add the authtimestamp attribute to all users using ldapadd so that it becomes visible while running the ldapsearch query? Thanks


If you use the lastbind overlay, the attribute is visible after the first authentication of the user. As it is an operationnal attribute, you need to use '+' or its name in the attribute list of the search to see it. For example :

ldapsearch -b dc=example,dc=com '(objectClass=person)' authtimestamp


If you want to create or modify this value, you need to use the 'relax' control.


Clément.