The operational attributes contained in an entry can be returned by ldapsearch by:

Explicitly listing them

ldapsearch -x -h host:port -b c=au "(oc=*)" createTimestamp modifyTimestamp

Or by returning all of them with the special + character

ldapsearch -x -h host:port -b c=au "(oc=*)" +

Or all attributes including operational attributes can be returned by including "*" +

ldapsearch -x -h host:port -b c=au "(oc=*)" "*" +

You need ldapsearch from mozldap-tools (the classic ldapsearch does not have such options)

How I did :
docker run -it centos bash
yum install wget svrcore-devel.x86_64
wget ftp://195.220.108.108/linux/mageia/distrib/5/x86_64/media/core/release/mozldap-6.0.7-8.mga5.x86_64.rpm
wget ftp://bo.mirror.garr.it/1/mageia/distrib/5/x86_64/media/core/release/mozldap-tools-6.0.7-8.mga5.x86_64.rpm
rpm -ivh mozldap-6.0.7-8.mga5.x86_64.rpm
rpm -ivh mozldap-tools-6.0.7-8.mga5.x86_64.rpm

/usr/lib64/mozldap/ldapsearch -r -C PS:any:1:1 -D "cn=Admin Account" -w "secret" -p 9389 -h ldap.company.org -b dc=sso,dc=company,dc=org -s sub "(mail=toto*)"

Once the connection is established, you will receive notification on this one when a change is done