Vladimir Dzhuvinov writes: > I'd like to use the operational "modifyTimeStamp" attribute, to check > when a particular entry was last modified. I've encountered it with > most directory servers I've worked with, such as OpenDS and OpenLDAP. > Can I reasonably assume that this op attribute is available in all > major LDAPv3 compatible directory servers, and that its behaviour > would be consistent across them? RFC 4512 doesn't exactly mandate > modifyTimeStamp.
No. You can assume very little about LDAP servers in general, since LDAP is so flexibly defined and deployed. For example, services that are actually about something else but provide LDAP as an access protocol, may not bother to deal with all aspects of LDAP. Then there are applications like the OpenLDAP's passwd demo backend: It provides an LDAP view of /etc/passwd, which does't _have_ any per-entry timestamps to publish. -- Hallvard
