In the immortal words of Lee, Tom J: > I need to be able to see the attributes under the object class > 'passwordPolicy'; passwordExpirationTime, passwordExpWarned, or > passwordPolicySubentry. I know they are considered Operational > Attributes but I cannot determine the schema to use in my Perl LDAP > search algorithm to dump these values. This is where you can help.
RTFM... Certain additional attributes such as "createtimestamp" and other operational attributes may also be available for the asking: $ldap->search( ... , attrs => ['createtimestamp'] , ... ); To retreive the default attributes and additional ones, use '*'. $ldap->search( ... , attrs => ['*', 'createtimestamp'] , ... ); The key is that you must request operational attributes specifically by name. If you can't see them even if you ask by name, the object you're binding as might not have access to those attributes. %% Christopher A. Bongaarts %% [EMAIL PROTECTED] %% %% Internet Services %% http://umn.edu/~cab %% %% University of Minnesota %% +1 (612) 625-1809 %%