Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

While trying to get users by ObjectSid, I discover that some person-Object does not have this Attribute. I'm wondering if this is a common case or an error in our directory.
The reason because I want this to know is that I'm writing a program to query LDAP by SID.

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

Within AD's schema, the Person class does not define an Object-SID attribute. The User class does define Object-SID and it is mandatory.

It may be worth noting that neither Top (from which Person is sub-classed) or Organizational-Person (from which User is sub-classed) define Object-SID. Object-SID is defined on the User class via its Auxiliary Class, Security Principal.

share|improve this answer
    
Thank you very much @jscott, that is I wanted to know! –  mtm Aug 18 '11 at 6:34
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.