LDAPWiki: ANR attribute set

Overview#

ANR attribute set are the attributes used within the Ambiguous Name Resolution (ANR) LDAP SearchRequest

By default, the following attributes are set for ANR which varies by version as shown below.

Attribute	Windows Server 2000	Windows Server 2003	AD LDS	Windows Server 2003 R2	Windows Server 2008 Windows Server 2012
displayName	X	X	X	X	X
givenName	X	X		X	X
legacyExchangeDN	X	X		X	X
msDS-AdditionalSamAccountName		X		X	X
msDS-PhoneticCompanyName					X
msDS-PhoneticDepartment					X
msDS-PhoneticDisplayName					X
msDS-PhoneticFirstName					X
msDS-PhoneticLastName					X
msExchMailNickname	X	X	X	X	X
physicalDeliveryOfficeName	X	X	X	X	X
proxyAddresses	X	X	X	X	X
Name	X	X	X	X	X
SamAccountName	X	X		X	X
sn	X	X		X	X

AttributeTypes in ANR attribute set#

You can determine the AttributeTypes in ANR attribute set function by performing some LDAP searches.

Query the Schema Partition with a LDAP SearchFilter below:

(&(objectCategory=attributeSchema)(searchFlags:1.2.840.113556.1.4.803:=4))

This query will obtain the AttributeTypes with the SearchFlags which have the fANR bit set.

The attributeSchema on an Windows Server 2003 instance:

CN=Display-Name, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=Given-Name, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=Legacy-Exchange-DN, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=ms-DS-Additional-Sam-Account-Name, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=Physical-Delivery-Office-Name, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=Proxy-Addresses, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=RDN, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=SAM-Account-Name, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com
CN=Surname, CN=Schema,CN=Configuration,DC=mad,DC=willeke,DC=com

NOTE: Microsoft Active Directory returns the "CN value" for the schema entries not the LDAP name. So cn=Display-Name will show as displayName in a LDAP search in the Schema Partition.

More Information#

There might be more information for this subject on one of the following:

Ambiguous Name Resolution