The attribute *olcLastBindPrecisio**n* is not available for OpenLDAP 2.5, *pwdLastSuccess* is updated whenever a BIND operation is successful.

Regards

On 2/8/24 14:57, Jean-Luc Bourguignon wrote:
Hello,

Thx for your answer.

I did not pay attention it was for 2.6x but why it’s working in 2.5.16 as I’ve 
the new attribut and it’s updated as I wanted, only the precision is not set !! 
There should be a default value or it’s at each login by default??

I was using the old overlay in 2.5.7 but I decided to move from it to source 
one during upgrade to 2.5.16 as attributes aren’t the same and on my production 
systems it was not enabled yet then it will be ready to move to 2.6x without 
having to do actions on old attribut to new one.

Brgds,
J-L.



On 8 Feb 2024, at 14:44, Abdelkader Chelouah<[email protected]>  wrote:

On 2/8/24 14:39,[email protected]  wrote:
Dears,

I'm running openldap 2.5.16 in which I'm using lastbind feature included in 
source.
To enable it, I read that 2 attributs should be inserted in DB config file 
side, in which I added :

olcLastBind: TRUE
olcLastBindPrecision: 3600

But it seems that olcLastBindPrecision isn't supported because when I did a 
slapcat of the configuration of the ldap instance in which both are added, I 
get following error message :

UNKNOWN attributeDescription "OLCLASTBINDPRECISION" inserted.

I removed it from my configuration and restarted the slapd then I discovered that 
attribut "pwdLastSuccess" is well updated but I don't know with which precision 
(default ??).

So, my question is why this parameter isn't supported ? Is there something  
else to enable ?

Thx in advance,
Jean-Luc.
Hello,


It is only supported starting from  OpenLDAP 2.6. If you want to used this 
attribute with OpenLDAP 2.5, you have to switch to lastbind overlay.


Regards

Reply via email to