On 9/17/24 12:11 PM, Christopher Paul chris.paul@rexconsulting.net wrote:
What does a comment beginning with "realdn" mean in an auditlog LDIF?
FWIW I figured this out, at least partially. It seems that autogroup records the rootdn as the fourth field/modifiersName for groups, but then adds as the second line of the comment section the "realdn: ..." of the actual user that did the update to add/remove/update the member entry.