[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ITS#5040, operational attribute updates

Howard Chu wrote:
> Possible alternatives:
>   1) only update modifyTimeStamp in response to actual Modify (and
> MoDDN) requests from a client. (thus, not for any internally generated
> updates.)

For auditing purposes I'd prefer this. All modifications *excluding*
things done by overlays (e.g. slapslapo-refint).

>   2) only update modifyTimeStamp if user attributes are changed.

Guess this would also apply to changes done by overlays? IMHO this would
be the 2nd best option.

>   3) always update modifyTimeStamp


Ciao, Michael.