ldap - Active Directory Replicated Attributes Replication System Flags -
in active directory schema, attribute entries have "system-flags" attribute indicates options attributes including replication across domain controllers.
from remarks section @ https://msdn.microsoft.com/en-us/library/ms680022%28v=vs.85%29.aspx found out that
- system-flags bit 1 indicates attribute not replicated.
- system-flags bit 2 indicates attribute replicated "global catalog"
i programmer uses ad service provided infrastructure team. don't know "global catalog" is, looking non-replicated attributes can query domain controllers them find value need.
i ran bitwise query find non-replicated attributes have bit 1 on in system-flags. got list of attributes.
(&(objectcategory=attributeschema)(systemflags:1.2.840.113556.1.4.803:=1))
i wanted test consistency of querying attributes both replicated , not checking attributes bits 1 , 2 both on.
(&(objectcategory=attributeschema)(&(systemflags:1.2.840.113556.1.4.803:=1)(systemflags:1.2.840.113556.1.4.803:=2)))
i thought second query nonsensical query of replicated-and-not-replicated attributes return no results, did return 14 attributes (including object-guid
). i'm wondering whether infrastructure team made mistake, or i'm misunderstanding how ad (or ldap in general) works.
is error or need know something?
try
(&(objectcategory=attributeschema)(systemflags:1.2.840.113556.1.4.803:=3))
which indicate both bit 1 , bit 2 set.
Comments
Post a Comment