ITS#10372 last-bind configuration manual updates

diff --git a/contrib/slapd-modules/lastbind/slapo-lastbind.5 b/contrib/slapd-modules/lastbind/slapo-lastbind.5
index 82d666d5d1bdbe487ea130c27938c4e588096bdf..f90215bcf025ebc88857cdc1500a805a5d5c7056 100644 (file)
--- a/contrib/slapd-modules/lastbind/slapo-lastbind.5
+++ b/contrib/slapd-modules/lastbind/slapo-lastbind.5
@@ -19,10 +19,9 @@ older than a given value, thus avoiding large numbers of write
 operations penalizing performance.
 One sample use for this overlay would be to detect unused accounts.
 
-Now that OpenLDAP has native support for most of this functionality,
-storing the value in pwdLastSuccess to better interact with the Behera
-Password Policy draft 10. Unless you require lastbind_forward_updates,
-you should consider using that instead.
+Now that OpenLDAP has native support for most of this functionality, you 
+should consider storing the value in pwdLastSuccess to better interact 
+with the Behera Password Policy draft 10.
 
 .SH CONFIGURATION
 The config directives that are specific to the

diff --git a/doc/man/man5/slapd-config.5 b/doc/man/man5/slapd-config.5
index da60a9693c3b1b014c47e660c9410badf38a735e..270550f4bc5c27e450a13960a74ac405a8d63bf5 100644 (file)
--- a/doc/man/man5/slapd-config.5
+++ b/doc/man/man5/slapd-config.5
@@ -1515,7 +1515,10 @@ by the syncrepl provider. By default, olcLastMod is TRUE.
 Controls whether
 .B slapd
 will automatically maintain the pwdLastSuccess attribute for
-entries. By default, olcLastBind is FALSE.
+entries. By default, olcLastBind is FALSE. On a replication 
+consumer the pwdLastSuccess attribute will be forwarded to 
+the provider assuming updateref setting and chain overlay 
+are appropriately configured.
 .TP
 .B olcLastBindPrecision: <integer>
 If olcLastBind is enabled, specifies how frequently pwdLastSuccess

diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5
index a85832b0752830dec3bc8d858eaf058978a5af45..6382d40a7589d3b6cbe7a5ff8fd3efabea322ce2 100644 (file)
--- a/doc/man/man5/slapd.conf.5
+++ b/doc/man/man5/slapd.conf.5
@@ -1404,7 +1404,10 @@ by the syncrepl provider. By default, lastmod is on.
 Controls whether
 .B slapd
 will automatically maintain the pwdLastSuccess attribute for
-entries. By default, lastbind is off.
+entries. By default, lastbind is off. On a replication 
+consumer the pwdLastSuccess attribute will be forwarded 
+to the provider assuming updateref setting and chain overlay 
+are appropriately configured.
 .TP
 .B lastbind-precision <integer>
 If lastbind is enabled, specifies how frequently pwdLastSuccess