Hi,

Scenario

AD LDS on Windows Server 2016
Addressbook for our non-Windows email clients and multifunction printers (email address lookup for scanning)

Does AD-LDS allow searches using ObjectClass as part of the filter?

Something like

"(&(objectclass=person)(uid=bob))" - fails

"(&(objectclass=*)(uid=bob))" - works

Just "uid=bob" works

I don't see objectclass attributes as part of the return from a ldapsearch query or using LDP. The only document I've been able to find that even refers to this topic is https://blogs.uw.edu/barkills/2010/06/28/adam-or-ad-lds-2/

New printer being evaluated needs to have objectClass as part of the filter.

Background

Used the following LDIF files during configuration

MS-InetOrgPerson
MS-User
MS-UserProxy
MS-UserProxyFull

Users are added with

objectClass: top
objectClass: person
objectClass: user
objectClass: organizationalPerson
objectClass: inetOrgPerson

as part of the ldif file.

al
--
Al Lilianstrom
Authentication Services

Fermi National Accelerator Laboratory
www.fnal.gov
lilstrom@xxxxxxxxxxxxxxxx

Forum info: http://www.activedir.org
Problems unsubscribing? Email admin@xxxxxxxxxxxxxxxx