Hi! I guess the LDAP standard doesn't have a syntax for the current time. So the solution could be that openLDAP provides a pseudo attribute "somewhere". But still I don't know how to relate a time attribute "somewhere" with another entry's attributes. Computing the literal "time now" seems the cleanest solution IMHO.
Regards, Ulrich >>> Michael Ströder<mich...@stroeder.com> schrieb am 12.02.2014 um 22:12 in Nachricht <52fbe3b0.7040...@stroeder.com>: > Laurent Meunier wrote: >> I'm trying to build a ldap query with the current date or the current >> timestamp (something like myAttributeDate >= now()). All solutions I've found >> on Internet require to compute the current date in a script and then build > the >> ldap query with the computed date. >> >> Unfortunately, I can't do this because the ldap query will be in a static >> file: ldap_filter in /etc/saslauthd.conf. >> >> Is it possible with OpenLDAP to use the current date or timestamp in a ldap >> query without compute it in a script? > > I vaguely remember that Daniel Pluta contributed patches for his I-D. > > http://tools.ietf.org/html/draft-pluta-ldap-srv-side-current-time-match > > Maybe you should dig in the ITS. > > Ciao, Michael.
