Description:
The Directory server handles automatic account inactivity through the
Account Policy plugin. Through this plugin, one has the flexibility to
determine whether an entry should be inactivated depending on the value of a
particular attribute (referenced by the value of stateattrname). Moreover, this
plugin also provides the functionality to store the last login time of an entry
(also stored in the attribute referenced by the value of stateattrname). This
request is for an improvement in functionality, in which this dual role of the
stateattrename attribute is split into two separate attributes. This would
provide functionality that is inachievable with the current semantics.

Example:

If account lockout is based on passwordExpirationTime under Account Policy
plugin then lastLoginTime does not get updated. The configuration used for
passwordExpirationTime is given below.

dn: cn=config,cn=Account Policy Plugin,cn=plugins,cn=config
objectClass: top
objectClass: extensibleObject
cn: config
alwaysrecordlogin: yes
stateattrname: abc
altstateattrname: passwordExpirationTime
specattrname: acctPolicySubentry
limitattrname: accountInactivityLimit
accountInactivityLimit: 2592000

In above configration stateattrname has set with dummy value hence when the
dummy is not available then altstateattrname is checked for alternate value.
The above configuration help is implemention account lockout base on
passwordExpirationTime and the passwordExpirationTime does not get update with
customer login time. But this configuration does not allow lastLoginTime to be
updated.