disciple01 has asked for the wisdom of the Perl Monks concerning the following question:

Hi monks,

This is probably quite an obscure question. =/

I think I've mastered the art of retrieving information from microsofts active directory using the perl Net::LDAP module.

However I'm finding I need to retrieve the last update time of the email field within active directory. I am able to do this by using the ldp.exe tool provided by microsoft or using `repadmin /showmeta <dn of user object> <domain controller>` in order to retrieve the AD's 'replication metadata'. (in that each AD field has a timestamp so that replication conflicts don't occur and so the most recent update to a field overrides all previous updates. )

I would like to pull this data ideally using the Net::LDAP module or if that's not possible through some other perl method that doesn't rely on calling slow third party tools (like repadmin). Ideally I'd like to be able to use perl to run an ldap query to retrieve all users whose email field was updated within the last 24 hours but I fear the ldap queries interface might not allow me to query replication metadata.

Have any knowledgeable monks done anything similar before and could provide some pointers.

Thanks.

  • Comment on Viewing Active Directory Replication Metadata!

Replies are listed 'Best First'.
Re: Viewing Active Directory Replication Metadata!
by gellyfish (Monsignor) on Aug 02, 2004 at 14:43 UTC

    This sound like something that you would want to get at through the "Active Directory Services Interface" - I guess you can get at this stuff using Win32::OLE - read more about it here

    /J\

      Thanks for the reply, I was hoping to avoid Win32::OLE if possible, I've not had good experiences with it in the past.

      That technet article could prove useful though.