--On Thursday, September 10, 2020 10:13 AM +0200 Ulrich Windl Ulrich.Windl@rz.uni-regensburg.de wrote:
That is one aspect; the other aspect is "who _uses_ the attribute?". Typically clients don't care about modifyTimeStamp (maybe even they are not allowed to read it), but obviously memberOf is something the client cares about, because it'S essential information.
There are plenty of attributes that are used by clients that are operational (much of ppolicy for example). And there are many clients that *do* make use of things like modifyTimeStamp, to find all entries modified after X point in time.
In any case, if you feel memberOf should not be operational, feel free to argue this point with Microsoft. ;)
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com