Is it possible to turn on recording of users Last Login times in selected OUs without turning on alwaysRecordLogin in
cn=config,cn=Account Policy Plugin,cn=plugins,cn=config?


I'm using ds389 to service SSSD Centos and RHEL (6 and 7) clients and some some Solaris 10 and 11 clients.

Currently with about client 80 systems. With 10 masters and with always
recordlogin set to ON, with 2 replication agreements outbound from each of the ds389 servers, the replication could barely keep up and sometime has to wait for 10 minutes of more to be able access a replication destination.

There was far too many updates for the replication to handle just from these few client systems last login times. Each ds389 server is bare metal install on X4-2 server running Centos 7.

I need to track the user's (humans) last log in times. I do not need (and I don't see that it is possible) to track the last login times of all the machine accounts. I had turn off the alwaysRecordLogin. 

Thanks,
Bob Harvey