Can anyone tell me what to fix, so that ldapsearch retrieves the same
attributes that Apache Directory Studio retrieves?

I have an Apache Directory Studio connection going to the server that
holds the Master of [root]. I'm running the ldapsearch command on the
same server (although I get the same results if I run it from a
workstation on the network). Both connections use the same
credentials.

Using Apache DS and looking at a particular account, I can see the
attribute "loginTime", It matches what iManager shows for the account
under Restrictions -> Login Restrictions -> Last login.

But when I run ldapsearch, asking for several attributes including
LASTLOGINTIME, this particular account does not return LASTLOGINTIME.
It returns other attributes, but not LASTLOGINTIME.

It does not happen for every account; looks like it might affect about
15% of accounts.

cat /etc/*release
LSB_VERSION="core-2.0-noarch:core-3.2-noarch:core-4.0-noarch:core-2.0-x86_64:core-3.2-x86_64:core-4.0-x86_64"
Novell Open Enterprise Server 11 (x86_64)
VERSION = 11.2
PATCHLEVEL = 2
SUSE Linux Enterprise Server 11 (x86_64)
VERSION = 11
PATCHLEVEL = 3

NetIQ eDirectory 8.8 SP8 v20806.050

Thank you for any help you can give me.


--
DGerisch
------------------------------------------------------------------------
DGerisch's Profile: https://forums.netiq.com/member.php?userid=10000
View this thread: https://forums.netiq.com/showthread.php?t=53854