On Wed, 2018-07-11 at 16:05 -0400, Mark Reynolds wrote:
> 
> 
> On 07/11/2018 03:20 PM, Ghiurea, Isabella wrote:
> > Hi List
> > I am looking to cfg nsIdleTimeout attribute for a specific  DS
> > user, I tryed using 389-console and ldapmodify but I not
> > successful, in 389-console this attribute is in grey when trying to
> > add a value will not allowed , with ldapmodify nothing happened no
> > prompt or error given back but ldapsearch will not display the
> > attribute, what I am missing ?
>  
> https://access.redhat.com/documentation/en-us/red_hat_directory_serve
> r/10/html/administration_guide/finding_directory_entries#Setting_Reso
> urce_Limits_Based_on_the_Bind_DN-
> Setting_Resource_Limits_Using_the_Command_Line
> 
> In your ldapsearch you probably have to request the attribute:
> nsidletimeout
> 
>     ldapsearch -D "cn=directory manager" -W -b "YOUR_SUFFIX"
> uid=YOUR_UID nsidletimeout
> 

Mark's answer is correct, but as a more general discussion point, LDAP
has a notion of attributes that are visible always, and attributes you
have to request by name. For example

ldapsearch .... '(uid=x)' *

vs

ldapsearch .... '(uid=x)' nsidletimeout

Thankfully 389-ds supports an operator to show all these in a single
query:

ldapsearch .... '(uid=x)' +

You can combind this of course to see everything at once:

ldapsearch .... '(uid=x)' + * 

Hope that helps,



> Mark
> > Thank you
> > 
> > 
> > 
> > _______________________________________________
> > 389-users mailing list -- 389-users@lists.fedoraproject.org
> > To unsubscribe send an email to 389-users-leave@lists.fedoraproject
> > .org
> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidel
> > ines
> > List Archives: https://lists.fedoraproject.org/archives/list/389-us
> > e...@lists.fedoraproject.org/message/6MERFFFRY3E2NDBOTMCWTSMEOWTDFEW
> > R/
>  
> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave@lists.fedoraproject.o
> rg
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelin
> es
> List Archives: https://lists.fedoraproject.org/archives/list/389-user
> s...@lists.fedoraproject.org/message/7TL3T7KBZJN3W7PVIFQY4WTJ53VBRT4W/
-- 
Sincerely,

William
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/5VAR25GGHRQADHHJ6SBN6I4ZDBOBIVMA/

Reply via email to