Brandon G wrote:
> In the IDM console under 'Advanced Properties' on an object you can see
> create and modify timestamp and other bits of info like this. How you
> can pull this info as an attribute via LDAP? By default, it is not
> appearing.
>
modifyTimestamp and other such attributes are operational attributes -
these types of attributes do not show up unless explicitly asked for -
in order to use ldapsearch to get this attribute, use
ldapsearch .... "objectclass=*" modifyTimestamp
or replace objectclass=* with the search filter you want to use
if you want to get all regular attributes and specified operational
attributes, use
ldapsearch .... "objectclass=*" * modifyTimestamp
The "*" means "all regular attributes"

You can do a search of cn=schema to see which attributes have USAGE
directoryOperation - the console does this
> -Brandon
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users