From 6327f45d7de73f669fa438d4f5823e139cf4e6b4 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Ond=C5=99ej=20Kuzn=C3=ADk?= Date: Thu, 4 Nov 2021 10:15:27 +0000 Subject: [PATCH] ITS#9725 Update lastbind manpage to document core functionality --- contrib/slapd-modules/lastbind/slapo-lastbind.5 | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/contrib/slapd-modules/lastbind/slapo-lastbind.5 b/contrib/slapd-modules/lastbind/slapo-lastbind.5 index d0da8b8dea..82d666d5d1 100644 --- a/contrib/slapd-modules/lastbind/slapo-lastbind.5 +++ b/contrib/slapd-modules/lastbind/slapo-lastbind.5 @@ -19,6 +19,11 @@ older than a given value, thus avoiding large numbers of write operations penalizing performance. One sample use for this overlay would be to detect unused accounts. +Now that OpenLDAP has native support for most of this functionality, +storing the value in pwdLastSuccess to better interact with the Behera +Password Policy draft 10. Unless you require lastbind_forward_updates, +you should consider using that instead. + .SH CONFIGURATION The config directives that are specific to the .B lastbind @@ -98,6 +103,11 @@ default slapd configuration file .SH SEE ALSO .BR slapd.conf (5), .BR slapd (8). +.LP +IETF LDAP password policy proposal by P. Behera, L. Poitou and J. +Sermersheim: documented in IETF document +"draft-behera-ldap-password-policy-10.txt". + The .BR slapo-lastbind (5) overlay supports dynamic configuration via -- 2.47.3