Overview#
SERVER_SEARCH_FLAG_PHANTOM_ROOT (SSFPR) is a "Flag" passed to the LDAP_SERVER_SEARCH_OPTIONS_OID which is used with an LDAP Search request to control various behaviors.For Microsoft Active Directory this instructs the server to search all NamingContext replicas except application NamingContext replicas that are subordinate to the search base, even if the search base is not instantiated on the server.
For AD LDS, the behavior is the same except that it also includes application NamingContext replicas in the search.
For Microsoft Active Directory and AD LDS, this will cause the search to be executed over all NC replicas (except for application NCs on AD DS DCs) held on the DC that are subordinate to the search base. This enables search bases such as the empty string, which would cause the server to search all of the NC replicas (except for application NCs on AD DS DCs) that it holds.
