24 Jul
2007
24 Jul
'07
5:11 a.m.
Howard Chu wrote:
Possible alternatives:
- only update modifyTimeStamp in response to actual Modify (and
MoDDN) requests from a client. (thus, not for any internally generated updates.)
For auditing purposes I'd prefer this. All modifications *excluding* things done by overlays (e.g. slapslapo-refint).
- only update modifyTimeStamp if user attributes are changed.
Guess this would also apply to changes done by overlays? IMHO this would be the 2nd best option.
- always update modifyTimeStamp
Nope.
Ciao, Michael.