title: Querying LDAP by date
body: <p><strong>The Problem:</strong></p>
  
  <p>Certain LDAP date fields, like <code>createTimestamp</code> or <code>pwdChangedTime</code>, are kept in a <a href="https://en.wikipedia.org/wiki/GeneralizedTime" rel="nofollow"><em>"generalized datetime format"</em></a>:</p>
  
  <pre><code>{"createTimestamp": "20100226142156Z"}
  </code></pre>
  
  <p>Which contains both date and time components inside. </p>
  
  <p><strong>The Question:</strong></p>
  
  <p>What is the canonical way to query LDAP records by a specific date?</p>
  
  <p><em>Example use case:</em> get all users created yesterday.</p>