ldap - Active Directory Replicated Attributes Replication System Flags -


in active directory schema, attribute entries have "system-flags" attribute indicates options attributes including replication across domain controllers.

from remarks section @ https://msdn.microsoft.com/en-us/library/ms680022%28v=vs.85%29.aspx found out that

  1. system-flags bit 1 indicates attribute not replicated.
  2. system-flags bit 2 indicates attribute replicated "global catalog"

i programmer uses ad service provided infrastructure team. don't know "global catalog" is, looking non-replicated attributes can query domain controllers them find value need.

i ran bitwise query find non-replicated attributes have bit 1 on in system-flags. got list of attributes.

(&(objectcategory=attributeschema)(systemflags:1.2.840.113556.1.4.803:=1)) 

i wanted test consistency of querying attributes both replicated , not checking attributes bits 1 , 2 both on.

(&(objectcategory=attributeschema)(&(systemflags:1.2.840.113556.1.4.803:=1)(systemflags:1.2.840.113556.1.4.803:=2))) 

i thought second query nonsensical query of replicated-and-not-replicated attributes return no results, did return 14 attributes (including object-guid). i'm wondering whether infrastructure team made mistake, or i'm misunderstanding how ad (or ldap in general) works.

is error or need know something?

try

(&(objectcategory=attributeschema)(systemflags:1.2.840.113556.1.4.803:=3)) 

which indicate both bit 1 , bit 2 set.


Comments

Popular posts from this blog

php - failed to open stream: HTTP request failed! HTTP/1.0 400 Bad Request -

java - How to filter a backspace keyboard input -

java - Show Soft Keyboard when EditText Appears -