There's an offline thread on this, we should be all set. ~Eric
-----Original Message----- From: joe [mailto:[EMAIL PROTECTED] Sent: Friday, March 18, 2005 12:15 AM To: ActiveDir@mail.activedir.org Cc: Eric Fleischman Subject: RE: [ActiveDir] Creating a backlink and forwardlink Eric is from Microsoft. He was an AD CPR engineer (recently changed) which means he was actually debugging AD failures like looking at the actual bits and bytes flying about. There are quite a few things available that aren't fully documented or documented at all. Just having a 2K3 DC as the schema master should be enough though I haven't tried this yet. If it was a requirement I expect Eric would have mentioned it. I do trust Eric almost implicitely which I don't with a lot of people. If you are seriously concerned, it is a guess, but you could spin up AD/AM and try it there. I would expect it will work there as well. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Isenhour, Joseph Sent: Wednesday, March 09, 2005 12:56 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Creating a backlink and forwardlink Ok my LDIF file is done and I'm ready to pull the trigger in my development environment; however, I have a couple of questions. Does anyone know what functional level is required to use this feature? 2K3 Forest or Domain? Or is having a 2K3 DC enough. I'm also a little worried about the lack of documentation from Microsoft. I always get a wee bit worried when it comes to undocumented features :) Has anyone actually done this? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Fleischman Sent: Friday, March 04, 2005 6:57 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Creating a backlink and forwardlink My blog had documentation innovation I tell you. I'm on the bleeding edge. Be careful, or you might get a papercut just reading it. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Isenhour, Joseph Sent: Friday, March 04, 2005 8:53 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Creating a backlink and forwardlink Got it. I love magical programming features :) You guys rock! I did a bunch of googles on this subject and came up with nothing. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Fleischman Sent: Friday, March 04, 2005 6:39 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Creating a backlink and forwardlink I think the question was, the number that I used as my sample linkID, is that a special numberor should you use your own. The answer is yes, it is. Use the exact linkID value I used for the creation of the forward link. That value triggers this special code path which will create link IDs for you. Don't think of the linkID value I used as an OID, think of it as "magical" and special. :) ~Eric -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, March 04, 2005 6:42 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Creating a backlink and forwardlink Sure, but if you are on Windows 2003 or AD/AM you don't have to. That is the beauty of this, that OID causes AD to autogenerate a link ID that is guaranteed unique. The only reasons you should really use linkids you get from MS anymore is if you do make decisions based on linkid values (not just the existence of) or you need to use the schema mods on Windows 2000 AD. BTW, I believe I do recall you from DEC even with my old failing memory. :oP joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Isenhour, Joseph Sent: Friday, March 04, 2005 7:00 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Creating a backlink and forwardlink One more question about autolinking. In the example that is shown on the blog you sent, the forward LinkID appears to be an OID. Is that correct? Can I select an OID from my pool and use it as the LinkID for the forward link? Thanks Joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Isenhour, Joseph Sent: Friday, March 04, 2005 3:46 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Creating a backlink and forwardlink Sorry I missed the link to the info in your first message. Thanks joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Isenhour, Joseph Sent: Friday, March 04, 2005 3:32 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Creating a backlink and forwardlink I do have an OID from Microsoft. I knew that picking my own LinkID had to be a bad thing, but I didn't know of any other way to get it. Can you expand on autolinking? Thanks Joe, BTW this is the Joe that you met at DEC in Virginia. This is my first Post! Thanks for letting me know about this distribution list. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, March 04, 2005 1:38 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Creating a backlink and forwardlink Small correction, you will register your prefix and OID (or even request an OID) from MS and then you can request a linkid pair, DO NOT create your own linkid values. Additionally if this is on K3 or AD/AM you can use autolinking and not use a specific linkid value. See http://blogs.msdn.com/efleis/archive/2004/10/12.aspx For a writeup. I was talking with Eric one day and he mentioned it and I was like, "WHAT? No I never heard of that!" so he documented it in his blog. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti Sent: Friday, March 04, 2005 4:31 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Creating a backlink and forwardlink Hi Joseph, I tested this for the purposes of our "Inside Active Directory" book. You should define the linkID attribute for both of your attributeSchema objects. The forward link must have an even positive non-zero number (for example, the member attribute has 2) and the back link must have a larger-by-1 odd value (for example, the memberOf attribute has 3). A forward-link attribute must use one of the following syntaxes: DN, DN with Unicode string, DN with binary, access point DN, and OR name. A back-link attribute must be of syntax DN. The two linkID numbers must not conflict with any other attributes. You can find free numbers manually, if just for your own use, or programmatically, if the installation must work in any forest. The platform SDK has a sample C++ code for this. You must first create the forward link, and then the back link. The back link must be multivalued (and the forward link may be). In addition, the platform SDK says that "By convention, back link attributes are added to the mayContain value of the Top abstract class. This enables the back link attribute to be read from objects of any class because they are not actually stored with the object, but are calculated based on the forward link values." For production purposes, it might be a good idea to register your link ID pair with Microsoft at http://msdn.microsoft.com/certification/ADLinkID.asp Yours, Sakari ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Isenhour, Joseph Sent: Friday, March 04, 2005 10:45 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Creating a backlink and forwardlink I'm trying to figure out how to extend our schema with a forwardlink attribute and a corresponding backlink attribute. I understand how to create an attribute with a DN syntax and I even understand how the two are linked in Active Directory. What I don't know is what to put in my LDIF to make AD link them. Has anyone ever done this? Thanks List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
