The operational attributes contained in an entry can be returned by ldapsearch by:
Explicitly listing them
ldapsearch -x -h host:port -b c=au "(oc=*)" createTimestamp modifyTimestamp
Or by returning all of them with the special + character
ldapsearch -x -h host:port -b c=au "(oc=*)" +
Or all attributes including operational attributes can be returned by including "*" +
ldapsearch -x -h host:port -b c=au "(oc=*)" "*" +
You need ldapsearch from mozldap-tools (the classic ldapsearch does not have such options)
How I did :
docker run -it centos bash
yum install wget svrcore-devel.x86_64
wget ftp://195.220.108.108/linux/mageia/distrib/5/x86_64/media/core/release/mozldap-6.0.7-8.mga5.x86_64.rpm
wget ftp://bo.mirror.garr.it/1/mageia/distrib/5/x86_64/media/core/release/mozldap-tools-6.0.7-8.mga5.x86_64.rpm
rpm -ivh mozldap-6.0.7-8.mga5.x86_64.rpm
rpm -ivh mozldap-tools-6.0.7-8.mga5.x86_64.rpm
/usr/lib64/mozldap/ldapsearch -r -C PS:any:1:1 -D "cn=Admin Account" -w "secret" -p 9389 -h ldap.company.org -b dc=sso,dc=company,dc=org -s sub "(mail=toto*)"
Once the connection is established, you will receive notification on this one when a change is done
Le genre de truc qui repose sur une connexion qui doit restée up alors que idle..