Data type for Generalized time AD attribute in directory.xml

Products

• CA Identity Manager

Issue/Introduction

 am trying to set an attribute in AD using PX policy and I am getting "Error in attribute conversion operation". Datatype on directory.xml is string and in AD it is generalized time syntax. Can you please let me know how to fix the issue and what should be the datatype in directory.xml.

Resolution

 In our sample directory.xml we state the following:

<!-- 5. valuetype - data type for the attribute (String, Integer, Number, Date, ISODate, UnicenterDate) --> 

  Microsoft states:

https://learn.microsoft.com/en-us/windows/win32/adschema/s-string-generalized-time

String(Generalized-Time) syntax

 

A time string format defined by ASN.1 standards. Use this syntax for storing time values in Generalized-Time format.

The format for the Generalized-Time syntax is "YYYYMMDDHHMMSS.0Z". An example of an acceptable value is "20010928060000.0Z". The "Z" indicates no time differential. Active Directory stores date/time as Greenwich Mean Time (GMT). If no time differential is specified, GMT is the default.

If the time is specified in a time zone other than GMT, the differential between the time zone and GMT is appended to the string instead of "Z" in the form "YYYYMMDDHHMMSS.0[+/-]HHMM". An example of an acceptable value is "20010928060000.0+0200". The differential is based on the formula: GMT=Local+differential.

For more information, see ISO 8601 and X680.

 

This should be submitted as type string in the following format: 20240408060000.0Z

That would be: 04/08/2024 at 6 A.M.