last login time?

[Michael L Martin <mm...@gmail.com>]

Hello,

I'm very new to Apache Directory, and LDAP in general. We would like to 
track the last login time and ip address of users. How can we do this 
with Apache DS?

Thanks,
Michael Martin


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@directory.apache.org
For additional commands, e-mail: users-help@directory.apache.org

Re: last login time?

[Stefan Seelmann <ma...@stefan-seelmann.de>]

As Shawn said there is not existing way to track last login and IP address.

One idea would be implement your own interceptor [1], in its bind()
method you get both the autenticating user and via the IoSession the IP
address of the LDAP client. But that's ApacheDS specific and not
portable to other LDAP servers.

But it also depends on your system architecture. Do the users directly
authenticate against the LDAP server? Or do you have some other
authentication system that uses LDAP as backend?

Kind Regards,
Stefan

[1] https://directory.apache.org/apacheds/advanced-ug/1.4-interceptors.html


On 8/5/21 7:17 PM, Shawn McKinney wrote:
> 
>> On Aug 5, 2021, at 11:08 AM, Michael L Martin <mm...@gmail.com> wrote:
>>
>> I'm very new to Apache Directory, and LDAP in general. We would like to track the last login time and ip address of users. How can we do this with Apache DS?
> 
> Hello Michael,
> 
> I’m not aware of any way to track IP address nor last login time in ApacheDS but I’ll let the others chime in if they have any ideas.
> 
> OpenLDAP has an overlay to track last login time but that functionality falls outside of standard support in LDAPv3.
> 
> —
> Shawn
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@directory.apache.org
> For additional commands, e-mail: users-help@directory.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@directory.apache.org
For additional commands, e-mail: users-help@directory.apache.org

Re: last login time?

[Shawn McKinney <sm...@apache.org>]

> On Aug 5, 2021, at 11:08 AM, Michael L Martin <mm...@gmail.com> wrote:
> 
> I'm very new to Apache Directory, and LDAP in general. We would like to track the last login time and ip address of users. How can we do this with Apache DS?

Hello Michael,

I’m not aware of any way to track IP address nor last login time in ApacheDS but I’ll let the others chime in if they have any ideas.

OpenLDAP has an overlay to track last login time but that functionality falls outside of standard support in LDAPv3.

—
Shawn


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@directory.apache.org
For additional commands, e-mail: users-help@directory.apache.org