Hi,

I'm trying to search entries in an OpenLDAP (v2.4.7) directory using their last modification date as a criteria. Digging in the schemas, I couldn't find an attribute that contained such a value. The only thing I found was the internal attribute "entryCSN" used by OpenLDAP to manage synchronization.



I tried to do several ldapsearch queries, but I couldn't manage to obtain a decent result.

Using "(&(objectClass=groupOfUniqueNames))"
=> I get every group of the directory. I can see that lots of them were modified in 2009

Related problem :
Using "(&(objectClass=groupOfUniqueNames)(entryCSN<=20091224))"
=> The slapd2.4 process stops without returning anything.

Using "(&(objectClass=groupOfUniqueNames)(entryCSN <= 20091224))"
(The same query with spaces)
=> I don’t get any result. Shouldn't I retrieve the entries modified before 2010/12/24 ?

Using "(&(objectClass=groupOfUniqueNames)(entryCSN >= 20091224))"
=> I don’t get any result. Shouldn't I retrieve the entries modified after 2010/12/24 ?



- Does anyone know how to filter entries using their entryCSN?
- Btw, is it even possible?

Best regards

--

Pierre Laporte