This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 192 lines
!!! Overview
[{$pagename}] are the attributes used within the [Ambiguous Name Resolution] ([ANR]) [LDAP] [SearchRequest]
By default, the following [attributes] are set for [ANR] which varies by version as shown below.
%%zebra-table
%%sortable
%%table-filter
||Attribute||[Windows Server 2000]||[Windows Server 2003]||[AD LDS]||[Windows Server 2003 R2]||[Windows Server 2008]\\[Windows Server 2012]
|[displayName]|X|X|X|X|X
|[givenName]|X|X| |X|X
|[legacyExchangeDN]|X|X| |X|X
|[msDS-AdditionalSamAccountName]| |X| |X|X
|[msDS-PhoneticCompanyName]| | | | |X
|[msDS-PhoneticDepartment]| | | | |X
|[msDS-PhoneticDisplayName]| | | | |X
|[msDS-PhoneticFirstName]| | | | |X
|[msDS-PhoneticLastName]| | | | |X
|[msExchMailNickname]|X|X|X|X|X
|[physicalDeliveryOfficeName]|X|X|X|X|X
|[proxyAddresses]|X|X|X|X|X
|[Name|NAME]|X|X|X|X|X
|[SamAccountName]|X|X| |X|X
|[sn]|X|X| |X|X
/%
/%
/%
!! [AttributeTypes] in [{$pagename}]
You can determine the [AttributeTypes] in [{$pagename}] function by performing some LDAP searches.
Query the [Schema Partition] with a [LDAP SearchFilter] below:
{{{
(&(objectCategory=attributeSchema)(searchFlags:1.2.840.113556.1.4.803:=4))
}}}
This query will obtain the [AttributeTypes] with the [SearchFlags] which have the [fANR] bit set.
The [attributeSchema] on an [Windows Server 2003] instance:
{{{
CN=Display-Name, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=Given-Name, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=Legacy-Exchange-DN, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=ms-DS-Additional-Sam-Account-Name, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=Physical-Delivery-Office-Name, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=Proxy-Addresses, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=RDN, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=SAM-Account-Name, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=Surname, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
}}}
%%information
NOTE: [Microsoft Active Directory] returns the "CN value" for the schema entries not the LDAP name. So cn=Display-Name will show as displayName in a [LDAP] search in the [Schema Partition].
%%
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]