Michael Ströder wrote:
> I'm trying to use slapo-rwm to simplify bind-DNs used. I'm also using
> slapo-lastbind to record the last simple bind timestamp and slapo-ppolicy also
> for recording pwdFailureTime.
>
> Using latest RE24 of course.
>
> Something like this defined *within* the database section:
>
> ---------------------- snip ----------------------
> overlay accesslog
> [..]
>
> rwm-rewriteMap slapd uid2dn "ldap:///o=example?entryDN?sub?";
> rwm-rewriteContext bindDN
> rwm-rewriteRule "^(uid=[^,]+),o=example$" "${uid2dn($1)}" ":@I"
>
> overlay lastbind
>
> overlay ppolicy
> ppolicy_default cn=ppolicy-default,cn=ampua,ou=ampua
> ppolicy_hash_cleartext
> ppolicy_use_lockout
>
> slapo-lastbind correctly updates the attribute 'authTimestamp' in the entry
> referenced by the rewritten bind-DN.
>
> slapo-ppolicy does *not* correctly update the attribute 'pwdFailureTime' in
> the entry referenced by the rewritten bind-DN.
> ---------------------- snip ----------------------
Hmm, updating 'pwdFailureTime' works after moving the rewrite stuff to global
configuration section. Hope this does not break something else.
slapo-rwm is scary.
Ciao, Michael.
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature