Quick LDAP Question

  • Thread starter Thread starter Yves St-Cyr
  • Start date Start date
Y

Yves St-Cyr

Anyone know how to query the "whenChanged" attribute. This
attribute must follow the "Generalized Time" syntax. I am
trying to query AD to find out what AD group was modified
during the day.

This is my query:
(&(ObjectClass=group)(Whenchanged=17*)) This query will
fail.

(&(ObjectClass=group)(Whenchanged=*)) This query will work.

Anyone have any ideas?

Thanks

Yves
 
AFAIK Generalized time string can have format "YYYYMMDDHHMMSS+-HHMM" or
"YYYYMMDDHHMMSS.0Z" and I don't think you can do substring searches (not
100% sure). I would define your query
(&(objectClass=User)(whenChanged>=20030717000000.0Z))
This will give you all objects changed today (17.7.2003)
..0Z at the end means that the date is already in GMT/UTC format otherwise
you have to add .0+0200 at the end for GMT+1 (+1 for daylight savings time).

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com
 
Back
Top