[389-users] modifytimestamp -- how to get via ldap?

[Rich Megginson]

Brandon G wrote:
> In the IDM console under 'Advanced Properties' on an object you can see 
> create and modify timestamp and other bits of info like this.  How you 
> can pull this info as an attribute via LDAP?  By default, it is not 
> appearing.
>   
modifyTimestamp and other such attributes are operational attributes - 
these types of attributes do not show up unless explicitly asked for - 
in order to use ldapsearch to get this attribute, use
    ldapsearch .... "objectclass=*" modifyTimestamp
or replace objectclass=* with the search filter you want to use
if you want to get all regular attributes and specified operational 
attributes, use
    ldapsearch .... "objectclass=*" \* modifyTimestamp
The "*" means "all regular attributes"

You can do a search of cn=schema to see which attributes have USAGE 
directoryOperation - the console does this
> -Brandon
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>