<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 07/30/2013 09:28 AM,
<a class="moz-txt-link-abbreviated" href="mailto:harry.devine@faa.gov">harry.devine@faa.gov</a> wrote:<br>
</div>
<blockquote
cite="mid:OF3B25E411.D001BA72-ON85257BB8.0054B7E3-85257BB8.00550261@faa.gov"
type="cite">
<br>
<font face="sans-serif" size="2">I'm not trying to lock out any
accounts
based on login time currently, just add the lastLoginTime
attribute. If
I understand that link you sent me, if I do not put
altstateattrname: createTimestamp
as stated at </font><a moz-do-not-send="true"
href="https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/account-policy-plugin.html#account-policy-plugin-wo-lockout"><font
face="sans-serif" size="2">https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/account-policy-plugin.html#account-policy-plugin-wo-lockout</font></a><font
face="sans-serif" size="2">
then it should work?</font>
<br>
</blockquote>
Not sure.<br>
<blockquote
cite="mid:OF3B25E411.D001BA72-ON85257BB8.0054B7E3-85257BB8.00550261@faa.gov"
type="cite">
<br>
<font face="sans-serif" size="2">Also, I did notice that the
changes
I put in this morning somehow aren't there. I manually edited
my
dse.ldif file, saved it, restarted the directory server, and
tried it.
Is this not the acceptable method? </font>
<br>
</blockquote>
<br>
The best method is ldapmodify, then restart.<br>
<br>
If you must edit dse.ldif, make sure the server is not running or
your changes will be lost.<br>
<blockquote
cite="mid:OF3B25E411.D001BA72-ON85257BB8.0054B7E3-85257BB8.00550261@faa.gov"
type="cite">
<br>
<font face="sans-serif" size="2">Thanks for the help!</font>
<br>
<font face="sans-serif" size="2">Harry</font>
<br>
<br>
<font face="sans-serif" size="2">Harry Devine<br>
Common ARTS Software Development<br>
AJM-245<br>
(609)485-4218<br>
<a class="moz-txt-link-abbreviated" href="mailto:Harry.Devine@faa.gov">Harry.Devine@faa.gov</a></font>
<br>
<br>
<br>
<table width="100%">
<tbody>
<tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">From:</font>
</td>
<td><font face="sans-serif" size="1">Rich Megginson
<a class="moz-txt-link-rfc2396E" href="mailto:rmeggins@redhat.com"><rmeggins@redhat.com></a></font>
<br>
</td>
</tr>
<tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">To:</font>
</td>
<td><font face="sans-serif" size="1">Harry
Devine/ACT/FAA@FAA</font>
</td>
</tr>
<tr>
<td valign="top"><font color="#5f5f5f" face="sans-serif"
size="1">Cc:</font>
</td>
<td><font face="sans-serif" size="1">"General discussion
list for the
389 Directory server project."
<a class="moz-txt-link-rfc2396E" href="mailto:389-users@lists.fedoraproject.org"><389-users@lists.fedoraproject.org></a></font>
</td>
</tr>
<tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Date:</font>
</td>
<td><font face="sans-serif" size="1">07/30/2013 11:10 AM</font>
</td>
</tr>
<tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Subject:</font>
</td>
<td><font face="sans-serif" size="1">Re: [389-users]
Question about lastlogintime</font></td>
</tr>
</tbody>
</table>
<br>
<hr noshade="noshade">
<br>
<br>
<br>
<font size="3">On 07/30/2013 07:26 AM, </font><a
moz-do-not-send="true" href="mailto:harry.devine@faa.gov"><font
color="blue" size="3"><u>harry.devine@faa.gov</u></font></a><font
size="3">
wrote:</font>
<br>
<font face="sans-serif" size="2"><br>
I just followed that and made the changes, restarted the server,
and logged
in with user account. I logged in fine, but if I try to do an
ldapsearch
and search for lastLoginTime, I get nothing back. I don't see
that
attribute in that user's Advanced Properties page either. So, I
guess
its back to my original question: Do I need to manually add
the lastLoginTime attribute to all 460 users manually? Or are
there
any logs that I can examine to see if it is being rejected some
how?</font><font size="3">
</font>
<br>
<a moz-do-not-send="true"
href="https://fedorahosted.org/389/ticket/47439"><font
color="blue" size="3"><u>https://fedorahosted.org/389/ticket/47439</u></font></a>
<br>
<font face="sans-serif" size="2"><br>
Thanks,</font><font size="3"> </font><font face="sans-serif"
size="2"><br>
Harry</font><font size="3"> <br>
</font><font face="sans-serif" size="2"><br>
Harry Devine<br>
Common ARTS Software Development<br>
AJM-245<br>
(609)485-4218</font><font color="blue" face="sans-serif"
size="2"><u><br>
</u></font><a moz-do-not-send="true"
href="mailto:Harry.Devine@faa.gov"><font color="blue"
face="sans-serif" size="2"><u>Harry.Devine@faa.gov</u></font></a><font
size="3">
<br>
<br>
</font>
<table width="100%">
<tbody>
<tr valign="top">
<td width="9%"><font color="#5f5f5f" face="sans-serif"
size="1">From:</font><font size="3">
</font>
</td>
<td width="90%"><font face="sans-serif" size="1">Rich
Megginson </font><a moz-do-not-send="true"
href="mailto:rmeggins@redhat.com"><font color="blue"
face="sans-serif" size="1"><u><rmeggins@redhat.com></u></font></a><font
size="3">
</font>
</td>
</tr>
<tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">To:</font><font
size="3">
</font>
</td>
<td><font face="sans-serif" size="1">Harry
Devine/ACT/FAA@FAA</font><font size="3">
</font>
</td>
</tr>
<tr>
<td valign="top"><font color="#5f5f5f" face="sans-serif"
size="1">Cc:</font><font size="3">
</font>
</td>
<td><font face="sans-serif" size="1">"General discussion
list for the
389 Directory server project." </font><a
moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org"><font
color="blue" face="sans-serif" size="1"><u><389-users@lists.fedoraproject.org></u></font></a><font
size="3">
</font>
</td>
</tr>
<tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Date:</font><font
size="3">
</font>
</td>
<td><font face="sans-serif" size="1">07/26/2013 04:19 PM</font><font
size="3">
</font>
</td>
</tr>
<tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Subject:</font><font
size="3">
</font>
</td>
<td><font face="sans-serif" size="1">Re: [389-users]
Question about lastlogintime</font></td>
</tr>
</tbody>
</table>
<br>
<font size="3"><br>
</font>
<hr noshade="noshade"><font size="3"><br>
<br>
<br>
On 07/26/2013 01:35 PM, </font><a moz-do-not-send="true"
href="mailto:harry.devine@faa.gov"><font color="blue" size="3"><u>harry.devine@faa.gov</u></font></a><font
size="3">
wrote: </font><font face="sans-serif" size="2"><br>
<br>
I looked them over but I'm still not clear on it. I don't
necessarily
want to lock out accounts after a certain amount of time, I just
want to
record the last login time. I guess I still don't see whether I
need
add that attribute to each user account, either manually or via
some sort
of script.</font><font size="3"> </font><font color="blue"
size="3"><u><br>
</u></font><a moz-do-not-send="true"
href="https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/account-policy-plugin.html#account-policy-plugin-wo-lockout"><font
color="blue" size="3"><u>https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/account-policy-plugin.html#account-policy-plugin-wo-lockout</u></font></a><font
size="3">
</font><font face="sans-serif" size="2"><br>
<br>
Thanks,</font><font size="3"> </font><font face="sans-serif"
size="2"><br>
Harry</font><font size="3"> </font><font face="sans-serif"
size="2"><br>
<br>
Harry Devine<br>
Common ARTS Software Development<br>
AJM-245<br>
(609)485-4218</font><font color="blue" size="3"><u><br>
</u></font><a moz-do-not-send="true"
href="mailto:Harry.Devine@faa.gov"><font color="blue"
face="sans-serif" size="2"><u>Harry.Devine@faa.gov</u></font></a><font
size="3">
<br>
</font>
<table width="100%">
<tbody>
<tr valign="top">
<td width="9%"><font color="#5f5f5f" face="sans-serif"
size="1">From:</font><font size="3">
</font>
</td>
<td width="90%"><font face="sans-serif" size="1">Rich
Megginson </font><a moz-do-not-send="true"
href="mailto:rmeggins@redhat.com"><font color="blue"
face="sans-serif" size="1"><u><rmeggins@redhat.com></u></font></a><font
size="3">
</font>
</td>
</tr>
<tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">To:</font><font
size="3">
</font>
</td>
<td><font face="sans-serif" size="1">"General discussion
list for the
389 Directory server project." </font><a
moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org"><font
color="blue" face="sans-serif" size="1"><u><389-users@lists.fedoraproject.org></u></font></a><font
size="3">
</font>
</td>
</tr>
<tr>
<td valign="top"><font color="#5f5f5f" face="sans-serif"
size="1">Cc:</font><font size="3">
</font>
</td>
<td><font face="sans-serif" size="1">Harry
Devine/ACT/FAA@FAA</font><font size="3">
</font>
</td>
</tr>
<tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Date:</font><font
size="3">
</font>
</td>
<td><font face="sans-serif" size="1">07/26/2013 11:57 AM</font><font
size="3">
</font>
</td>
</tr>
<tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Subject:</font><font
size="3">
</font>
</td>
<td><font face="sans-serif" size="1">Re: [389-users]
Question about lastlogintime</font></td>
</tr>
</tbody>
</table>
<br>
<font size="3"><br>
<br>
</font>
<hr noshade="noshade"><font size="3"><br>
<br>
<br>
On 07/26/2013 09:07 AM, </font><a moz-do-not-send="true"
href="mailto:harry.devine@faa.gov"><font color="blue" size="3"><u>harry.devine@faa.gov</u></font></a><font
size="3">
wrote: </font><font face="sans-serif" size="2"><br>
<br>
We were interested in tracking a user's last login time, and I
see the
attribute that I can add in the user's profile. But we have 460
users
so adding that in manually would be tedious. I saw this article
online:
</font><a moz-do-not-send="true"
href="https://fedorahosted.org/389/ticket/371"><font
color="blue" face="sans-serif" size="2"><u>https://fedorahosted.org/389/ticket/371</u></font></a><font
face="sans-serif" size="2">
and wondered if all we had to do was add what it mentions to our
dse.ldif
file and restart the server. </font><font size="3"> <br>
<br>
Yes, but see </font><a moz-do-not-send="true"
href="http://www.port389.org/wiki/Account_Policy_Design"><font
color="blue" size="3"><u>http://www.port389.org/wiki/Account_Policy_Design</u></font></a><font
size="3">
and </font><a moz-do-not-send="true"
href="https://fedorahosted.org/389/ticket/47439"><font
color="blue" size="3"><u>https://fedorahosted.org/389/ticket/47439</u></font></a><font
face="sans-serif" size="2"><br>
<br>
<br>
Would that work? If not, would scripting the addition of that
attribute
be possible? Or is there another way?</font><font size="3"> <br>
<br>
</font><font face="sans-serif" size="2"><br>
<br>
<br>
Thanks!</font><font size="3"> </font><font face="sans-serif"
size="2"><br>
Harry</font><font size="3"> <br>
</font><tt><font size="3"><br>
<br>
--<br>
389 users mailing list</font></tt><font color="blue" size="3"><u><br>
</u></font><a moz-do-not-send="true"
href="mailto:389-users@lists.fedoraproject.org"><tt><font
color="blue" size="3"><u>389-users@lists.fedoraproject.org</u></font></tt></a><font
color="blue" size="3"><u><br>
</u></font><a moz-do-not-send="true"
href="https://admin.fedoraproject.org/mailman/listinfo/389-users"><tt><font
color="blue" size="3"><u>https://admin.fedoraproject.org/mailman/listinfo/389-users</u></font></tt></a><font
size="3">
<br>
<br>
<br>
<br>
</font>
<br>
<br>
<br>
</blockquote>
<br>
</body>
</html>