On Tue, Apr 29, 2025 at 11:51:47AM +0000, Windl, Ulrich wrote:
Hi!
Slapd-config states that pwdLastSuccess (provided by slapd) will be set if olcLastBind is set to true. However to do that the lastbind module/overlay is needed.
Hi Ulrich, it doesn't say that you need the overlay, does it? Can you point me to where if that's still the case?
But the latter sets authTimestamp. Slapo-policy documents that authTimestamp (provided by lastbind module) is set when lastbind is enabled.
At it seems pwdLastSuccess and authTimestamp are set to the same value.
Can someone explain the logic behind? I'm confused; do I really need the lastbind overlay?
pwdLastSuccess comes from ppolicy and as such when porting the lastbind functionality to core it was changed to support the draft v10+.
Regards,