LDAP Logon History

2019-09-11 00:43发布

Is it possible to know the login history of a user through LDAP? I'm trying to find a way bit so far I can only get the lastLogon and lastLogout.

Regards,
Elkas

1条回答
神经病院院长
2楼-- · 2019-09-11 01:39

It depends on LDAP backend. You put windows-server-2008 tag, so I expect you mean MS Active Directory or AD-LDS instance (aka ADAM). If so, you can query security event log on LDAP server (DC), if security auditing is on (as of default is on). You will need pretty high privilege to do this,so first ask domain admins to grant this permission. You can forgot for PHP or maybe you find some pecl package to read windows event log records.

If you will able to read security event log, you need to filter out lot of data like logon type (you will be interested in network-logon). However, depends on load of domain controller and number of active user accounts in AD, it will take lot of time to do this.

查看更多
登录 后发表回答