Question
How to get notifications from Samba/AD when objects or attributes are changed using Controls?
Answer
The basic control to receive changes in the directory is LDAP_SERVER_NOTIFICATION_OID or 1.2.840.113556.1.4.528. (https://ldapwiki.com/wiki/LDAP_SERVER_NOTIFICATION_OID)
To use this control the command line call looks like
univention-s4search --controls=local_oid:1.2.840.113556.1.4.528:0
Now every change will be printed in ldif format as you’re used to.
OID Listing
A listing of these Controls and related OIDs can be found at LDAP Extensions and Controls Listing (LDAP WiKi)