Ticket #48232 - winsync lastlogon attribute not syncing between DS and AD.
Bug Description:
From Microsoft forum:
The DirSync control taps into the replication stream to get the necessary
changes. Since lastLogon is not replicated, it isn't available via the
DirSync control.
Additional notes:
The lastLogon attribute is not replicated.
In contrast the lastLogontimeStamp attribute is replicated.
Fix Description:
Instead of lastLogon|lastLogoff, sync lastLogonTimestamp|lastLogoffTimestamp
which are the target of DirSync, to ntUserLastLogon|ntUserLastLogoff.
https://fedorahosted.org/389/ticket/48232
Reviewed by rmeggins@redhat.com (Thank you, Rich!!)