Brandon G wrote: > In the IDM console under 'Advanced Properties' on an object you can see > create and modify timestamp and other bits of info like this. How you > can pull this info as an attribute via LDAP? By default, it is not > appearing. > modifyTimestamp and other such attributes are operational attributes - these types of attributes do not show up unless explicitly asked for - in order to use ldapsearch to get this attribute, use ldapsearch .... "objectclass=*" modifyTimestamp or replace objectclass=* with the search filter you want to use if you want to get all regular attributes and specified operational attributes, use ldapsearch .... "objectclass=*" \* modifyTimestamp The "*" means "all regular attributes" You can do a search of cn=schema to see which attributes have USAGE directoryOperation - the console does this > -Brandon > -- > 389 users mailing list > 389-users@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/389-users > -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users