Setting Up Time Tracking for Last Logins
By default, a user’s last login time is not tracked.
To set up the tracking of a user’s last login time, you must complete the following tasks:
• Set the following attributes for the password policy:
ds-cfg-last-login-time-attribute
ds-cfg-last-login-time-format
You can set these attributes by setting the last-login-time-attribute and last-login-time-format properties.
• Set the idle-lockout-interval property to a nonzero value.