Re: (ITS#6550) Patch for smbk5pwd slapd overlay to include shadowLastChange

[michael@stroeder.com]

online@mark.ziesemer.com wrote:
> Full_Name: Mark A. Ziesemer
> Version: 2.4.21 / HEAD
> OS: Ubuntu Linux
> URL: ftp://ftp.openldap.org/incoming/smbk5pwd-shadow-b.patch
> Submission from: (NULL) (2001:470:1f11:3ae:dc54:73ba:be16:148)
> 
> Using the PasswordModify Extended Operation (exop) along with the smbk5pwd slapd
> overlay provides several benefits, but does not currently include the
> shadowLastChange attribute of the shadowAccount class.  This means the
> shadowLastChange is missed from update, unless specially done along with a
> PasswordModify.

While I agree that this could be useful in general I'd rather argue that for
Samba 3 'sambaPwdLastSet' should be set.

'shadowLastChange' is rather a POSIX account attribute which from my
understanding is out-of-scope for slapo-smbk5pwd. Well, the scope could be
extended...

Ciao, Michael.