On 26/11/03 12:15 pm, Hirmke Michael <[EMAIL PROTECTED]> wrote: > Hi, > > [...] >> Everything looks OK, except for the missing stuff. Are you certain the >> server's actually returning the missing stuff? > > uhm, sorry, perhaps I asked the wrong question 8-( > I'm quite sure, that the actual answer does *not* include the missing > stuff. > The better question might be: In which way do I have to query the > server (Windows 2003 DC) to get these attributes?
I probably didn't understand the original question correctly either. Are range-upper and range-lower actual directory attributes in AD, or just features of attribute definitions? I assumed the latter. I had a quick look in MSDN and I *think* they're both attributes *and* attribute features. So which one did you want? > [...] >> If you read the subschema subentry from perl yourself, and >> dump it to an >> LDIF file, that would be one way of seeing the raw >> attributeTypes values... > > Excerpt from $schema->dump with all the lines containing "rangeLower": > > attributeTypes: ( 1.2.840.113556.1.2.34 NAME 'rangeLower' SYNTAX > '1.3.6.1.4.1.1466.115.121.1.27' SINGLE-VALUE ) [...] OK, so it seems to find the attribute definition, and it is also permitted in various objectClasses. If they're supposed to be features of attribute definitions, like SINGLE-VALUE and so on, then I don't know for sure why AD doesn't return them. Maybe you have to bind using a particular name in order to get them, or maybe you have to bind over SSL to get them? Or maybe you can't get them via LDAP at all :-( If Robbie's reading this, he knows a lot about AD and might be able to suggest more things. Cheers, Chris
