Nope. Not every attribute is
returned. I don't know personally what the logic is that specifies what is
returned and what isn't. I would like to think it is something you can query out
of the schema but I have never seen anything to substantiate that thought.
It is easy to see it in action though,
query the schema on 2K and do the same on K3. You will certain attribs on
certain objects returned in 2K but not in K3, you have to ask for them meaning
that MS backed out the default return set. Why I don't know but helped someone
with an App that blew up because of it. I don't recall exactly what the
attribute was though, I purposely forgot it so I could have enough room in my
head to remember the thing about ntsecuritydescriptors...
What about ntsecuritydescriptors you ask?
ntsecuritydescriptor should be on every object but when have you seen a query
where you didn't specifically specify you needed it that it did get returned?
Answer, you have to ask for it.
With adfind you would do something
like
adfind -b <somebase> -f
<somefilter> * ntsecuritydescriptor
That will return what I call the * set
(star set) and also the ntsecuritydescriptor attribute.
I started to talk to ~Eric about this once
before but I don't think we ever got to the part of the discussion concerning
how it was determined what is returned and what isn't.
joe
From: [EMAIL PROTECTED] on behalf of AD
Sent: Tue 11/9/2004 6:00 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] LDP does not return modifyTimeStamp attribute...
Hmm, I am a little bit confused joe. I did not ask for
msExchAlObjectVersion but it returns it anyways. Isn't LDP suppose to return
every attribute that is set for a an object?
Thanks
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of listmail
Sent: Tuesday, November 09, 2004 4:31 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: [ActiveDir] LDP does not return modifyTimeStamp attribute...
Because you didn't request
it. That one needs to be specifically requested, you can instead use whenChanged
which is returned in the default * set.
joe
From: [EMAIL PROTECTED] on behalf of AD
Sent: Tue 11/9/2004 4:24 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] LDP does not return modifyTimeStamp attribute...
Does anyone know why LDP does not
return the modifyTimeStamp attribute?
