You want to refresh a dynamic object to keep it from expiring and getting deleted from Active Directory.
In each solution below, an example of adding a
user
object is used. Modify the examples as needed
to refresh whatever
object is needed.
Open LDP.
From the menu, select Connection → Connect.
For Server, enter the name of a domain controller (or leave it blank to do a serverless bind).
For Port, enter 389.
Click OK.
From the menu, select Connection → Bind.
Enter credentials of a user that can modify the object.
Click OK.
Select Browse → Modify.
For Dn, enter the DN of the dynamic object you want to refresh.
For Attribute, enter
entryTTL
.For Values, enter the new time to live (TTL) for the object in seconds.
Under Operation, select Replace.
Click Enter.
Click Run.
Dynamic objects expire after their TTL becomes 0. You can determine
when a dynamic object will expire by looking at the current value of
an object’s entryTTL
, which
contains the seconds remaining until expiration. If
you’ve created a dynamic object and need to refresh
it so that it will not get deleted, you must reset the
entryTTL
attribute to a new value. There is no
limit to the number of times you can refresh a dynamic object. As
long as the entryTTL
value does not reach 0, the
object will remain in Active Directory.
Recipe 4.11 for modifying an object, and Recipe 4.14 for creating a dynamic object
Get Active Directory Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.