NAMEslapo-lastbind - lastbind overlay to slapd
DESCRIPTIONThe lastbind overlay to slapd(8) allows recording the timestamp of the last successful bind to entries in the directory, in the authTimestamp attribute. The overlay can be configured to update this timestamp only if it is older than a given value, thus avoiding large numbers of write operations penalizing performance. One sample use for this overlay would be to detect unused accounts.
CONFIGURATIONThe config directives that are specific to the lastbind overlay must be prefixed by lastbind-, to avoid potential conflicts with directives specific to the underlying database or to other stacked overlays.
- overlay lastbind
This directive adds the
overlay to the current database, see
This slapd.conf configuration option is defined for the lastbind overlay. It must appear after the overlay directive:
- lastbind-precision <seconds>
is the number of seconds after which to update the
attribute in an entry. If the existing value of
is less than
old, it will not be changed.
If this configuration option is omitted, the
attribute is updated on each successful bind operation.
EXAMPLEThis example configures the lastbind overlay to store authTimestamp in all entries in a database, with a 1 week precision. Add the following to slapd.conf(5):
database <database> # ... overlay lastbind lastbind-precision 604800
must also load
if compiled as a run-time module;
- default slapd configuration file