Hi there,<div><br></div><div>I can change the shadowLastChange attribute:</div><div><br></div><div><div>maria@mimi:~/sysadmin/ldap$ ldapmodify -x -v -r -W -D &quot;cn=admin,dc=example,dc=com&quot; -f pass.expldap_initialize( &lt;DEFAULT&gt; )</div>
<div>Enter LDAP Password: </div><div>replace shadowLastChange:</div><div>        15786</div><div>modifying entry &quot;uid=chris,ou=people,dc=example,dc=com&quot;</div><div>modify complete</div></div><div><br></div><div>But, I can&#39;t see it:</div>
<div><br></div><div><div>annette:~# ldapsearch -x &quot;uid=chris&quot; shadowLastChange</div><div># extended LDIF</div><div>#</div><div># LDAPv3</div><div># base &lt;dc=example,dc=com&gt; (default) with scope subtree</div>
<div># filter: uid=chris</div><div># requesting: shadowLastChange </div><div>#</div><div><br></div><div># chris, people, <a href="http://example.com">example.com</a></div><div>dn: uid=chris,ou=people,dc=example,dc=com</div>
<div><br></div><div># search result</div><div>search: 2</div><div>result: 0 Success</div><div><br></div><div># numResponses: 2</div><div># numEntries: 1</div></div><div><br></div><div>Even though this is my permission:</div>
<div><br></div><div><div>olcAccess: {0}to attrs=shadowLastChange by self write by anonymous auth by dn=</div><div> &quot;cn=admin,dc=example,dc=com&quot; write by * read</div><div>olcAccess: {1}to attrs=userPassword by self write by anonymous auth by dn=&quot;cn=</div>
<div> admin,dc=example,dc=com&quot; write by * none</div><div>olcAccess: {2}to dn.base=&quot;&quot; by * read</div><div>olcAccess: {3}to * by self write by dn=&quot;cn=admin,dc=example,dc=com&quot; write by *</div><div>  read</div>
</div><div><br></div><div>Have I done something wrong with my permissions? Is there something else that could be going on here?</div><div><br></div><div>thanks,</div><div>Maria</div>