Hey Rich, I was reading the wikipedia page on Generalized time as well as this: http://www.obj-sys.com/asn1tutorial/node14.html Taking a closer look at the RFC4171, i can now see what part i was missing: The LDAP definition for the Generalized Time syntax is: ( 1.3.6.1.4.1.1466.115.121.1.24 DESC 'Generalized Time' ) This syntax corresponds to the GeneralizedTime ASN.1 type from [ASN.1], with the constraint that local time without a differential SHALL NOT be used. https://tools.ietf.org/html/rfc4517#section-3.3.13 I will have to have the code changes made to my apps to conform this. Thanks for all your help. James -- 389 users mailing list 389-users@%(host_name)s http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx