Re: (ITS#6238) contrib: lastbind overlay to record timestamp of last successful bind

[Kurt@OpenLDAP.org]

On Dec 10, 2010, at 12:02 PM, Howard Chu wrote:

> Good point. In that case it's probably fine as a separate overlay, the =
way it is now. Can we use the schema definition that Isode is using?

Not only yes, but hell yes.  Reuse and convergence is a good thing.

( 1.3.6.1.4.1.453.16.2.188 NAME 'authTimestamp'
	DESC 'last successful authentication using any method/mech'
        EQUALITY generalizedTimeMatch
        ORDERING generalizedTimeOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
        SINGLE-VALUE NO-USER-MODIFICATION USAGE dsaOperation )

And we use this attribute in our configuration object to enable/disable =
(default disabled).

( 1.3.6.1.4.1.453.16.2.189 NAME 'authTimestamps'
	DESC 'enable recording of last successful authentication using =
any method/mech'
        EQUALITY booleanMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
        SINGLE-VALUE USAGE dsaOperation )