I've been doing some tests, and looks like these two attributes aren't updated when using ldapsam backend. Haven't tried the others.
I know we can use some script in the netlogon share to know when the user logged in, but shouldn't those attributes do that?
Others have reported the same issue. Although its not a big issue, it would be nice to have them working.
An idea could be taken from:
After IRC conversations:
11:37 < segfault> any update on this: https://bugzilla.samba.org/show_bug.cgi?id=3276 ?
11:39 < vl> segfault: This would introduce a hell lot of LDAP replication traffic, that's why we don't do it. And logofftime
is essentially impossible, a Windows box does not tell us.
11:41 < segfault> humm, i see
11:42 < segfault> i'll close the bug then
11:42 < gd> vl: well, at least we could add the logon timestamp, activated via "ldapsam:update_logon_time=yes" or something
like that, then users who really want this (for whatever reason) can have it while the others are not confronted
with massive writes (esp. in replicating setups). Sounds reasonable?
11:42 < vl> gd: Yes, sort of.
For those who needs it, please read:
this will probably not be changed for the classic Samba NT4 DC any more. The Samba AD DC does this right.