Re: ldapsearch vs. slapcat

[Carl Litt <carl@execulink.com>]

The attributes you mention are operational attributes and are only 
returned if you append '+' to the end of your ldapsearch command.
To get all attributes from a search you need to append '*' '+'
to the command line to retrieve all attributes, including operational
ones.  These operators are mentioned in the ldapsearch(1) manpage.

Note that these attributes are maintained by slapd and cannot be modified
or added with an entry.

If you are looking to get a backup of your directory, slapcat is the way
to go.  It's output is intended to be imported into slapadd(1).

Carl Litt
Network Administrator
Execulink Internet


On Thu, 20 Jun 2002, Howard Bryden wrote:

> I'm running version 2.0.11 of OpenLDAP under HP-UX 11i.
> 
> I've noticed a difference between the results of slapcat and ldapsearch, namely that the latter does not report the createTimestamp, creatorsName, modifyTimestamp and modifiersName attributes.  I haven't located any statement in the manpages, the Administrator's Guide the mailing list archives or even Google that flat-out states that this is the intended behaviour.
> 
> Can anyone confirm whether the attribute dump from ldapsearch is indeed intended to be a strict subset of that from slapcat?
> 
> Thanks.
> 
> 
> 
> -----------------------------------------------------
> Rocket J. Squirrel: " ... we're going to have to think!"
> Bullwinkle J. Moose:  "There must be an easier way than that."
> 
>