NAME¶
slapo-lastbind - lastbind overlay to slapd
SYNOPSIS¶
ETCDIR/slapd.conf
DESCRIPTION¶
The
lastbind overlay to
slapd(8) allows recording the timestamp of
the last successful bind to entries in the directory, in the
authTimestamp attribute. The overlay can be configured to update this
timestamp only if it is older than a given value, thus avoiding large numbers
of write operations penalizing performance. One sample use for this overlay
would be to detect unused accounts.
CONFIGURATION¶
The config directives that are specific to the
lastbind overlay must be
prefixed by
lastbind-, to avoid potential conflicts with directives
specific to the underlying database or to other stacked overlays.
- overlay lastbind
- This directive adds the lastbind overlay to the current database,
see slapd.conf(5) for details.
This
slapd.conf configuration option is defined for the lastbind overlay.
It must appear after the
overlay directive:
- lastbind-precision <seconds>
- The value <seconds> is the number of seconds after which to
update the authTimestamp attribute in an entry. If the existing
value of authTimestamp is less than <seconds> old, it
will not be changed. If this configuration option is omitted, the
authTimestamp attribute is updated on each successful bind
operation.
EXAMPLE¶
This example configures the
lastbind overlay to store
authTimestamp in all entries in a database, with a 1 week precision.
Add the following to
slapd.conf(5):
database <database>
# ...
overlay lastbind
lastbind-precision 604800
slapd must also load
lastbind.la, if compiled as a run-time
module;
FILES¶
- ETCDIR/slapd.conf
- default slapd configuration file
SEE ALSO¶
slapd.conf(5),
slapd(8). The
slapo-lastbind(5) overlay
supports dynamic configuration via
back-config.
ACKNOWLEDGEMENTS¶
This module was written in 2009 by Jonathan Clarke. It is loosely derived from
the password policy overlay.