upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-20 14:50:14 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#10372 last-bind configuration manual updates

Browse source
This commit is contained in:
Lenka Klement 2025-09-03 15:14:44 +02:00 committed by Quanah Gibson-Mount
parent eae9c380d0
commit 442b2c84f8
3 changed files with 11 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
contrib/slapd-modules/lastbind/slapo-lastbind.5
View file

@ -19,10 +19,9 @@ older than a given value, thus avoiding large numbers of write
operations penalizing performance.
One sample use for this overlay would be to detect unused accounts.
Now that OpenLDAP has native support for most of this functionality,
storing the value in pwdLastSuccess to better interact with the Behera
Password Policy draft 10. Unless you require lastbind_forward_updates,
you should consider using that instead.
Now that OpenLDAP has native support for most of this functionality, you
should consider storing the value in pwdLastSuccess to better interact
with the Behera Password Policy draft 10.
.SH CONFIGURATION
The config directives that are specific to the

5
doc/man/man5/slapd-config.5
View file

@ -1517,7 +1517,10 @@ by the syncrepl provider. By default, olcLastMod is TRUE.
Controls whether
.B slapd
will automatically maintain the pwdLastSuccess attribute for
entries. By default, olcLastBind is FALSE.
entries. By default, olcLastBind is FALSE. On a replication
consumer the pwdLastSuccess attribute will be forwarded to
the provider assuming updateref setting and chain overlay
are appropriately configured.
.TP
.B olcLastBindPrecision: <integer>
If olcLastBind is enabled, specifies how frequently pwdLastSuccess

5
doc/man/man5/slapd.conf.5
View file

@ -1406,7 +1406,10 @@ by the syncrepl provider. By default, lastmod is on.
Controls whether
.B slapd
will automatically maintain the pwdLastSuccess attribute for
entries. By default, lastbind is off.
entries. By default, lastbind is off. On a replication
consumer the pwdLastSuccess attribute will be forwarded
to the provider assuming updateref setting and chain overlay
are appropriately configured.
.TP
.B lastbind-precision <integer>
If lastbind is enabled, specifies how frequently pwdLastSuccess