H
Hayim S. Hendeles
In a recent post, one of our very helpful posters, Joe Richards,
made the following comment about specifying an Active Directory
filter:
"In fact objectcategory=user, shouldn't even be valid. MS converts the
objectcategory=user to objectcategory=person in the background for
you."
While I have no doubts this is true, I have not been able to find
any MS documentation on this, and how it works. I am afraid that not
knowing this information might backfire in some cases.
For example: Since objectCategory is really stored as a DN, and only
objectClass as "person" --- might it be possible that ActiveDirectory
merely convers "objectCategory=person" to "objectClass=person".
Also, will it be more efficient to search for a full DN
-"objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=...."
as opposed to "objectCategory=person"
Lastly, is there any kind of documentation as to exactly what
shortcuts
are allowed when specifying "objectCategory"?
Thanks,
Hayim Hendeles
E-mail: (e-mail address removed)
made the following comment about specifying an Active Directory
filter:
"In fact objectcategory=user, shouldn't even be valid. MS converts the
objectcategory=user to objectcategory=person in the background for
you."
While I have no doubts this is true, I have not been able to find
any MS documentation on this, and how it works. I am afraid that not
knowing this information might backfire in some cases.
For example: Since objectCategory is really stored as a DN, and only
objectClass as "person" --- might it be possible that ActiveDirectory
merely convers "objectCategory=person" to "objectClass=person".
Also, will it be more efficient to search for a full DN
-"objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=...."
as opposed to "objectCategory=person"
Lastly, is there any kind of documentation as to exactly what
shortcuts
are allowed when specifying "objectCategory"?
Thanks,
Hayim Hendeles
E-mail: (e-mail address removed)