The original question was "I'm testing a csvde file and I want to delete object directly,without Tombstonelifetime. How can I do that ?"
I read that as the poster wanted to create and then remove objects without ever going through the tombstone phase. Within that context and those rules, I would say Dean answered the question perfectly. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ruston, Neil Sent: Monday, September 06, 2004 5:10 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] [ActiveDir Digest] With all due respect to Mr Wells: I'm not sure Dean really answered the question - instead, he offered an alternative way to create objects, such that they are removed automatically, after a TTL expires. :) Neil -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 14 August 2004 04:16 Subject: [ActiveDir Digest] --------------------------------------------------------- Subject: RE: [ActiveDir] Delete ad object without Tombstone lifetime. Date: Thu, 12 Aug 2004 23:44:45 -0400 From: <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] hahaha crud. I didn't understand one bit of that! -----Original Message----- From: [EMAIL PROTECTED] = [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Wednesday, August 11, 2004 10:36 AM To: [EMAIL PROTECTED]; 'Send - AD mailing list' Subject: RE: [ActiveDir] Delete ad object without Tombstone lifetime. Ah. Oh yeah. Very good very good. Dean.=20 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells Sent: Wednesday, August 11, 2004 10:32 AM To: Send - AD mailing list Subject: RE: [ActiveDir] Delete ad object without Tombstone lifetime. OK, if you had only Windows 2000 or even a hybrid this would not be particularly feasible nor advisable but since you don't, it's going to = be just peachy assuming you're at forest functional level 2 (Server 2003 Native) ... if you're not, it's still doable, just a lot more awkward = and less than supported. ******** WARNING - I'd like to point out to you that misuse of this = feature can entirely (and nigh on irrecoverably) destroy a forest ******** Windows 2003's Active Directory supports two applicable LDAP features; dynamic objects and dynamic auxiliary classes. =20 1. Dynamic aux. classes allow you to bolt an auxiliary class to new = object instances without having first made any schema alterations (i.e. - no = schema modification of any kind occurred). The attributes assigned to the auxiliary class then become available to the object instance(s) to which = the aux. class was assigned. 2. Dynamic objects provides a mean by which a TTL (using a unit of = seconds) can be written to an object after which time it self expires = ~simultaneously on all DCs without the need for a tombstone. By using dyn. aux. classes we can dynamically bolt the dynamicObject = class to new object instances which serves to provide us the attributes we = need; most prominently entryTTL. When the entry TTL is populated, the = directory service calculates an effective "time of death" and writes that to msDS-Entry-Time-To-Die (both attributes are actually constructed = depending on how they're used). I've not attempted this with CSVDE but have done so numerous times via = code and through LDIFDE so I'll leave it you to attempt the LDIF(DE) to = CSV(DE) conversion. Here's an example LDIF file that creates a "contact" = beneath the domain root using the default-minimum TTL of 15 minutes (this = default can be reduced if it's too high) - [Begin LDIF file named "foo.ldif"] dn: cn=3Dsuicidal,dc=3DX changetype: add objectClass: contact objectClass: dynamicObject entryTTL: 901 [/LDIF file] ... here's the command line syntax to inject its content - ldifde -i -f foo.ldif -c DC=3DX <your distinguished name here> ... for example - ldifde -i -f foo.ldif -c DC=3DX dc=3Dmset,dc=3Dlocal Hope that proves useful. Dean -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com=20 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of BATARD olivier Sent: Wednesday, August 11, 2004 8:39 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Delete ad object without Tombstone lifetime. I have a Windows 2003 domain exclusively. Olivier BATARD, Technicien syst=E8me - Poste 1655 Gestion Interne SIGMA Informatique http://www.sigma.fr 3 rue Newton, BP 4127, 44241 La Chapelle sur Erdre Cedex -----Message d'origine----- De : Dean Wells [mailto:[EMAIL PROTECTED] Envoy=E9 : mercredi 11 = ao=FBt 2004 14:41 =C0 : Send - AD mailing list Objet : RE: [ActiveDir] Delete = ad object without Tombstone lifetime. Do you have Windows 2000, 2003 or a combination? -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com=20 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of BATARD olivier Sent: Wednesday, August 11, 2004 5:43 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Delete ad object without Tombstone lifetime. Hello, I'm testing a csvde file and I want to delete object directly,without Tombstonelifetime. How can I do that ? Thanks, Olivier BATARD, Technicien syst=E8me - Poste 1655 Gestion Interne SIGMA Informatique http://www.sigma.fr 3 rue Newton, BP 4127, 44241 La Chapelle sur Erdre Cedex List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: = http://www.mail-archive.com/activedir%40mail.activedir.org/ --------------------------------------------------------- Subject: RE: [ActiveDir] ADAM attribute value Date: Fri, 13 Aug 2004 11:26:34 +0530 From: "Harpreet_Kapoor" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Hi, Thanks a lot to all you guys for helping me out. It has worked by using the attribute supportedCapabilities of RootDSE . This is a wonderful group where almost everyone is eager to help and I hope it continues this spirit... Cheers, Harry -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, August 13, 2004 2:45 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] ADAM attribute value Hi Harry, To get RootDSE via the LDAP API, you do a base level search with a null search root specified. RootDSE is kind of an "ADSI" thing to accomplish the same thing. You would need to use a filter such as (subschemaSubentry=3D*) or something because the RootDSE object doesn't have an objectClass, thus the default "objectClass=3D*" filter doesn't work. HTH, Joe K. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harpreet_Kapoor Sent: Thursday, August 12, 2004 10:05 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] ADAM attribute value Hey Eric, I couldn't locate the file ntldap.h on my machine. So, I wrote the following code : nResult =3D ldap_compare_s (ld, dcRoot, "supportedCapabilities","1.2.840.113556.1.4.1851;1.2.840.113556.1.4.1791 "); This again gives the error code 0x10 or decimal 16 which means that attribute is not present. Probably, this time its because of dcRoot which contains in my case "dc=3Dabcd,dc=3Dcom". However the RootDSE does = not have this distinguished name. Do I need to set the distinguished name of RootDSE first. If yes, how do I do it?=20 If no, how do I circumvent this situation? Thanks, Harry This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ --------------------------------------------------------- Subject: [ActiveDir] Creating an OU in ADAM Date: Fri, 13 Aug 2004 13:03:33 +0530 From: "Harpreet_Kapoor" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] This is a multi-part message in MIME format. ------_=_NextPart_001_01C48107.D6A5289E Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi guys, =20 I am trying to create an OU named "test" in ADAM under the root dc=3Dabcd,dc=3Dcom. For this ,I wrote the following code : =20 LDAPMod cnmod, ocmod; LDAPMod *mods[3]; char *cnvals[2], *ocvals[3]; =20 cnvals[0] =3D location; cnvals[1] =3D NULL; cnmod.mod_op =3D LDAP_MOD_ADD; cnmod.mod_type =3D "ou"; cnmod.mod_values =3D cnvals; ocvals[0]=3D"organizationalUnit"; ocvals[1]=3D"top"; ocvals[2]=3DNULL; ocmod.mod_op =3D 0; ocmod.mod_type =3D "objectclass"; ocmod.mod_values =3D ocvals; mods[0] =3D &cnmod; mods[1] =3D &ocmod; mods[2] =3D NULL; =20 char *entry =3D "ou=3Dtest,dc=3Dabcd,dc=3Dcom"; =20 int error =3D ldap_add_s(ld, entry, mods ); =20 The error code returned is 34 or 0x22 which means that the "distinguished name has an invalid syntax". Do I not need to give in "entry" the string containing the entry to add? What is wrong with this code ? =20 Thanks, Harry ============================================================================ == This message is for the sole use of the intended recipient. If you received this message in error please delete it and notify us. If this message was misdirected, CSFB does not waive any confidentiality or privilege. CSFB retains and monitors electronic communications sent through its network. Instructions transmitted over this system are not binding on CSFB until they are confirmed by us. Message transmission is not guaranteed to be secure. ============================================================================ == List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
