Brandon G wrote:
In the IDM console under 'Advanced Properties' on an object
you can see
create and modify timestamp and other bits of info like this. How you
can pull this info as an attribute via LDAP? By default, it is not
appearing.
modifyTimestamp and other such attributes are operational attributes -
these types of attributes do not show up unless explicitly asked for -
in order to use ldapsearch to get this attribute, use
ldapsearch .... "objectclass=*" modifyTimestamp
or replace objectclass=* with the search filter you want to use
if you want to get all regular attributes and specified operational
attributes, use
ldapsearch .... "objectclass=*" \* modifyTimestamp
The "*" means "all regular attributes"
You can do a search of cn=schema to see which attributes have USAGE
directoryOperation - the console does this
-Brandon
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users