Leveraging Operation Details in Triggering Events
LDAP Triggers support change inducing LDAP operations as Triggering Events. A more granular approach can be leveraging operation details, especially for the Modify operation.
An Extended Trigger Specification can be as follows:
AFTER Modify
WHEN ChangedAttributes or:{ userPassword, sambaNTPassword }
CALL "com.mycompany.ldap.utils.sp.Logger:logModifiedEntry" ( $object, $modification );