Re: ldapsearch using entryCSN

[Pierre Laporte <pierre.laporte@steria.com>]

My mistake, main problem solved.

Spaces are not allowed in ldap queries. In fact, I didn't get "no result", I got one message "Bad search filter" that was not handled correctly.

I changed my filters so that it now uses the createTimeStamp and modifyTimeStamp attributes.

Using "(&(objectClass=groupOfUniqueNames)(modifyTimeStamp<=20091224))", I retrieve the entries that haven't been modified since 2009/12/24.


Caution : this filter cannot be applied to the entryCSN attribute as it makes OpenLDAP shutdown.


Best Regards.

--

Pierre Laporte

On Thu, Jun 24, 2010 at 1:49 PM, Pierre Laporte <pierre.laporte@steria.com> wrote:

Hi,

I'm trying to search entries in an OpenLDAP (v2.4.7) directory using their last modification date as a criteria. Digging in the schemas, I couldn't find an attribute that contained such a value. The only thing I found was the internal attribute "entryCSN" used by OpenLDAP to manage synchronization.



I tried to do several ldapsearch queries, but I couldn't manage to obtain a decent result.

Using "(&(objectClass=groupOfUniqueNames))"
=> I get every group of the directory. I can see that lots of them were modified in 2009

Related problem :

Using "(&(objectClass=groupOfUniqueNames)(entryCSN<=20091224))"

=> The slapd2.4 process stops without returning anything.

Using "(&(objectClass=groupOfUniqueNames)(entryCSN <= 20091224))"

(The same query with spaces)
=> I don’t get any result. Shouldn't I retrieve the entries modified before 2010/12/24 ?

Using "(&(objectClass=groupOfUniqueNames)(entryCSN >= 20091224))"

=> I don’t get any result. Shouldn't I retrieve the entries modified after 2010/12/24 ?



- Does anyone know how to filter entries using their entryCSN?

- Btw, is it even possible?

Best regards

--

Pierre Laporte