Hi all,
I installed an Active Directory and use ADSI to access it.
I defined some extented attributes and objectClass in Active Directory.
Then a new object with type of extened objectClass is created, and the
new object has attribute of cn and some extented attributes. I can use
ADSI to retreive this object, but the problem is: when binding with the
object with anonymous user, use IADs.Get( ) to retreive extented attributes
causes an error: "The Active Directory datatype cannot be converted to/from
a native DS datatype". However, with anonymous bind, IADs.Get("cn") can
get the cn attribute of the object. If I bind the object with administrator's
username and password, then I can also use IADs.Get( ) to get the value of
extended attributes. So I guess it's some problem with permissions. I checked
ACEs in cn and extended attributes, they looks the same. And I also grants
read permission on the object to Everyone.
May anybody give some hints on this? Thanks a lot.
Regards,
Jingyu
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
