LDAP defines the modifyTimeStamp attribute to handle the updates to ldap entries. This can be a valuable piece of information for the ldap policy/attribute locators to refresh their data. This should be a configurable value added feature. Not the default.