Identity Manager User Discussions

Home

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to query an object using an attribute whose datatype is time in edirectory ?

Satz over 3 years ago

How to query an object using an attribute whose datatype is time in edirectory ?

Example :

useronboardtime = Aug 17, 2020 5:43:24 PM IST (20200817121324Z)

Tags:

Top Replies

dgersic over 3 years ago in reply to Satz +2

That would work as an LDAP search filter, yes. Maybe you could tell us what you're actually trying to do here, what you've tried, and what happened. Having us guessing probably isn't going to work out…
dgersic over 3 years ago +1

The example you posted looks like the LDAP interpretation of a time string. For the IDM engine, you need to use CTIME. You can convert one to the other as needed.
rrawson over 3 years ago in reply to Geoffrey Carman +1

Don't forget that the LDAP time format is not CTIME, it's yyyyMMddHHmmssZ

Parents

0 dgersic over 3 years ago

The example you posted looks like the LDAP interpretation of a time string. For the IDM engine, you need to use CTIME. You can convert one to the other as needed.
Cancel
Vote Up +1 Vote Down

Cancel
0 Geoffrey Carman over 3 years ago in reply to dgersic

In IDM Policy (DirXML Script) you can only query for the exact value, in CTIME as David suggested. I do not think wildcards are supported.
If you use LDAP in ECMA in your driver,, you can query for a lesser than or equal/greater than or equal timestamp to get something within a date range.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Geoffrey Carman over 3 years ago in reply to dgersic

In IDM Policy (DirXML Script) you can only query for the exact value, in CTIME as David suggested. I do not think wildcards are supported.
If you use LDAP in ECMA in your driver,, you can query for a lesser than or equal/greater than or equal timestamp to get something within a date range.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 rrawson over 3 years ago in reply to Geoffrey Carman

Don't forget that the LDAP time format is not CTIME, it's yyyyMMddHHmmssZ
Cancel
Vote Up +1 Vote Down

Cancel
0 Satz over 3 years ago in reply to rrawson

The below worked me..
(TerminationDate>=20200803000000Z)
Cancel
Vote Up +1 Vote Down

Cancel
0 dgersic over 3 years ago in reply to Satz

That would work as an LDAP search filter, yes.
Maybe you could tell us what you're actually trying to do here, what you've tried, and what happened. Having us guessing probably isn't going to work out.
Cancel
Vote Up +2 Vote Down

Cancel

Resources

Learning Services

Partner Programs

Privacy

Compliance

Help

Company

Privacy Policy
Terms of Use

Accessibility
Anti-Slavery Statement

Support
Contact Us

Careers
Code of Business Conduct and Ethics

The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.