jspωiki
OperationalAttribute

Overview (RFC 4512 section 3.4)#

OperationalAttributes are used or maintained by servers for administrative and operational purposes.

As stated in X.501: "There are three varieties of OperationalAttribute:

"Directory operational attributes"#

A directory operational attribute is used to represent operational and/or administrative information in the Directory Information Model.

This includes operational attributes maintained by the server (e.g., 'createTimestamp') as well as operational attributes that hold values administrated by the user (e.g., 'ditContentRules').

"DSA-shared operational attributes"#

A DSA-shared operational attribute is used to represent information of the DSA Information Model that is shared between DSAs.

"DSA-specific operational attributes"#

A DSA-specific operational attribute is used to represent information of the DSA Information Model that is specific to the DSA (though, in some cases, may be derived from information shared between DSAs; e.g., 'namingContexts').

The DSA Information Model operational attributes are detailed in X.501.

Operational attributes are not normally visible. They are not returned in search results unless explicitly requested by name.

Not all operational attributes are user modifiable. These should have an Attribute Usage Flags of NO-USER-MODIFICATION

Entries may contain, among others, the following operational attributes:

  • creatorsName: the Distinguished Name of the user who added this entry to the directory,
  • createTimestamp: the time this entry was added to the directory,
  • modifiersName: the Distinguished Name of the user who last modified this entry
  • modifyTimestamp: the time this entry was last modified.

Operational attributes are not included in entries returned from search operations unless they are explicitly included in the list of Attribute Selection. An explicit value of "+" (the plus sign) may also be included to request that all operational attributes be returned. RFC 3673

More Information#

There might be more information for this subject on one of the following: