summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
Diffstat (limited to 'src')
-rw-r--r--src/config/SSSDConfig/__init__.py.in1
-rw-r--r--src/config/etc/sssd.api.d/sssd-ldap.conf1
-rw-r--r--src/man/sssd-ldap.5.xml15
3 files changed, 17 insertions, 0 deletions
diff --git a/src/config/SSSDConfig/__init__.py.in b/src/config/SSSDConfig/__init__.py.in
index 5d023d780..8f0483908 100644
--- a/src/config/SSSDConfig/__init__.py.in
+++ b/src/config/SSSDConfig/__init__.py.in
@@ -305,6 +305,7 @@ option_strings = {
'ldap_chpass_uri' : _('URI of an LDAP server where password changes are allowed'),
'ldap_chpass_backup_uri' : _('URI of a backup LDAP server where password changes are allowed'),
'ldap_chpass_dns_service_name' : _('DNS service name for LDAP password change server'),
+ 'ldap_chpass_update_last_change' : _('Whether to update the ldap_user_shadow_last_change attribute after a password change'),
# [provider/ldap/sudo]
'ldap_sudo_search_base' : _('Base DN for sudo rules lookups'),
diff --git a/src/config/etc/sssd.api.d/sssd-ldap.conf b/src/config/etc/sssd.api.d/sssd-ldap.conf
index 8b3afb5b0..3b6b4e8fb 100644
--- a/src/config/etc/sssd.api.d/sssd-ldap.conf
+++ b/src/config/etc/sssd.api.d/sssd-ldap.conf
@@ -127,6 +127,7 @@ ldap_access_order = str, None, false
ldap_chpass_uri = str, None, false
ldap_chpass_backup_uri = str, None, false
ldap_chpass_dns_service_name = str, None, false
+ldap_chpass_update_last_change = bool, None, false
[provider/ldap/sudo]
ldap_sudo_search_base = str, None, false
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
index f8cf8f233..00acc8968 100644
--- a/src/man/sssd-ldap.5.xml
+++ b/src/man/sssd-ldap.5.xml
@@ -1620,6 +1620,21 @@
</varlistentry>
<varlistentry>
+ <term>ldap_chpass_update_last_change (bool)</term>
+ <listitem>
+ <para>
+ Specifies whether to update the
+ ldap_user_shadow_last_change attribute with
+ days since the Epoch after a password change
+ operation.
+ </para>
+ <para>
+ Default: False
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>ldap_access_filter (string)</term>
<listitem>
<para>