Novell is now a part of Micro Focus

Querying LDAP Operational Attributes

Novell Cool Solutions: Tip

Digg This - Slashdot This

Posted: 24 Nov 2004

This article explains how to query operational attributes with LDAP. The information is from the eDirectory Libraries for C Developer Kit at See also TID 10070418.

The information contained in the LDAP operational attributes are read-only. Clients cannot modify the attribute values. All of these operational attributes except creatorsName and ModifiersName are available only through LDAP. CreatorsName and modifiersName are available through LDAP and NDAP.

They are not returned in search results unless explicitly requested by name. They can be requested for all entries in an NDS directory.

Here are the operational attributes listed in the developer kit:

  • createTimeStamp
  • creatorsName
  • entryFlags
  • federationBoundary
  • localEntryID
  • modifiersName
  • modifyTimeStamp
  • structuralObjectClass
  • subordinateCount
  • subschemaSubentry

Sample Query

Here's a sample query to extract several operational attributes for user Fred:

./ldapsearch -D cn=admin,o=novell -W -b o=novell cn=fred createtimestamp creatorsname entryflags localentryid modifytimestamp

version: 2

# filter: cn=fred
# requesting: createtimestamp creatorsname entryflags localentryid modifytimestamp

# fred,teds
dn: cn=fred,o=novell
creatorsname: CN=admin,O=novell
localEntryID: 32847
entryFlags: 0
createTimeStamp: 20020422213635Z
modifyTimeStamp: 20020423212816Z

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1 

Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions.

© Copyright Micro Focus or one of its affiliates