Security Software

Hi,

I want to make some scripts/application to centrally check if a user's account is inactive.
For instance if he hasn't logged in for 6 months.

Since authentication for all my services is ldap based is there any way
LDAP would help me on that? I know I can check access log file for successful binds
but going back 6 months or maybe a year will not be that good...

Anyone with something cleverer? Maybe an LDAP plugin would help on that,
where every time a user is successfully authenticated an entry would be written
in his account or in a file.

I'm looking for ideas on this

Thanks,

Giannis