This is driving me nuts. I used to be able to see the time stamp for a users last login time. It has to be some where since you can set the account to auto disable after X number of days of inactivity.
In the AFP Service settings you can select what gets logged. Make sure you have Login and Logout selected.
Restart AFP just to be sure, then click the logging button. Check the access log and you should see the info there. All within Server Admin.
Sorry, i worded the question poorly. I meant to ask, where does the last login time get stored in the users opendirectory account so that the server knows when to disable an inactive account. Not the log of the last login. This must be stored somewhere in the users OD account. I need this info so that i can clear out accounts that have been inactive for over a year.
Hmm... I believe that the server doesn't do anything with the account in terms of logging in OD.
Mess around with the command dscl in terminal. (read the man page first) It behaves and stores data much like a basic file system.
The reason I think this is that I've set the number in WGM that deletes the users account as soon after a successful sync to 0. The user folder on the client is deleted immediately after logout. The user account on the server stays put and is still there today.
With all this in mind, I have a hunch that if you set this number to something, it sets the client to delete the account from the local directory on the client.
Anyone else have experience with this?
I'm only talking about network accounts on the server. I don't have a problem with the clients. I know that there are accounts on my server that have been inactive for over a year, but i have no way of identifying them. I used to be able to use the niutil to grab a last login time, but that tool doesn't work on SL server anymore. I can't find a solution with dscl either.
Where does last login time get stored for the user?
