RE: [ActiveDir] LDAP query on ObjectSID attribute

[daniel . gilbert]

Title: Message

And a hard question might be??????? -----Original Message----- From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 02, 2003 1:39 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] LDAP query on ObjectSID attribute We're giving a couple of them away at DEC Ottawa. So all you need to do is show up, answer a ridiculously easy question (e.g. how many CPU clocks are in the best case, non-error instruction path on a DC performing a non-SSL base level search of an existing directory object?), and you get a free book.   -g   Gil Kirkpatrick CTO, NetPro -----Original Message----- From: AD [mailto:[EMAIL PROTECTED] Sent: Monday, August 25, 2003 1:45 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LDAP query on ObjectSID attribute Would love to get is book. Not available from Chapters. ISBN #0672315874.   Do you have an extra copy you would like to sell?   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick Sent: Monday, August 25, 2003 1:03 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] LDAP query on ObjectSID attribute   Hey Joe,   Wow, thanks for the compliment dude.   Is the SID bind part of the ADSI ADsPath syntax, or is it something supported in LDP? I haven't seen it before as part of ADSI.   -g Gil Kirkpatrick CTO, NetPro -----Original Message----- From: Joe [mailto:[EMAIL PROTECTED] Sent: Saturday, August 23, 2003 7:46 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LDAP query on ObjectSID attribute This is an adsi thing and is called a SID Bind, you can also do a GUID bind in a similar manner. If you are using LDAP API instead of ADSI you need to encode the sid back into an octet string and do the search with it. Check out Gil Kirkpatrick's Programming Active Directory as he has some good info on this type of schtuff. Actually if you are doing any AD programming, get that book. Gil rocks. :op       joe     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of AD Sent: Friday, August 22, 2003 9:27 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LDAP query on ObjectSID attribute I never heard of using an attribute as your BaseDN.   If this worked for you I really would like to know how you did it.   Thanks   Y   From: Jimmy Andersson Sent: Thu 21/08/2003 7:34 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] LDAP query on ObjectSID attribute Why not use LDP and set it like this:   Base DN <SID=S-1-5-21-709049380-3306950797-3746505139> Filter (&(ObjectCategory=*)(name=*))   (I used a SID from my lab domain)   You might need to load the control for deleted objects, if it's deleted.   Regards, /Jimmy -------------------------------------     Jimmy Andersson, Q Advice AB                CEO & Principal Advisor &n bsp;     Microsoft MVP - Active Directory ---------- www.qadvice.com ----------     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of AD Sent: Friday, August 22, 2003 12:35 AM To: [EMAIL PROTECTED]   Anyone know how to query AD on the ObjectSID?     My query looks like this:     (&(ObjectCategory=user)(SamAccountName=*)(ObjectSID=S15-2-4-3412341341234124 32412344))    & lt; /FONT> Doesn't return anything. I know the sid must converted but I am not sure what format it should be in.     Thanks    Y  List info   : http://www.activedir.org/mail_list.htmList FAQ    : http://www.activedir.org/list_faq.htmList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/