Michael Ströder wrote:
I'm trying to use slapo-rwm to simplify bind-DNs used. I'm also using slapo-lastbind to record the last simple bind timestamp and slapo-ppolicy also for recording pwdFailureTime.
Using latest RE24 of course.
Something like this defined *within* the database section:
---------------------- snip ---------------------- overlay accesslog [..]
rwm-rewriteMap slapd uid2dn "ldap:///o=example?entryDN?sub?" rwm-rewriteContext bindDN rwm-rewriteRule "^(uid=[^,]+),o=example$" "${uid2dn($1)}" ":@I"
overlay lastbind
overlay ppolicy ppolicy_default cn=ppolicy-default,cn=ampua,ou=ampua ppolicy_hash_cleartext ppolicy_use_lockout
slapo-lastbind correctly updates the attribute 'authTimestamp' in the entry referenced by the rewritten bind-DN.
slapo-ppolicy does *not* correctly update the attribute 'pwdFailureTime' in the entry referenced by the rewritten bind-DN. ---------------------- snip ----------------------
Hmm, updating 'pwdFailureTime' works after moving the rewrite stuff to global configuration section. Hope this does not break something else.
slapo-rwm is scary.
Ciao, Michael.