Tracking Modifications to Directory Entries

By default, the server maintains special attributes for newly created or modified entries, as specified in the LDAP v3 specification. These special attributes are stored on the entry in the suffix and include the following:

• creatorsName — the DN of the user who initially created the entry.

• createTimestamp — the timestamp for when the entry was created, in GMT format.

• modifiersName — the DN of the user who last modified the entry.

• modifyTimestamp — the timestamp for when the entry was modified, in GMT format.

To Turn Off Entry Modification Tracking

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

Turning off entry modification tracking results in non-compliant data. As many applications rely on these attributes and as disabling this feature results in only minimal performance gains, we recommend that you do not turn off entry modification tracking.

Turn off entry modification tracking for the server.

$ dsconf set-server-prop -h host -p port suffix-DN mod-tracking-enabled:off