On the WKGUID thing, that binding syntax is definitely not an ADSI thing. It is supported by AD directly and works in other APIs as well.
That said, I'm not sure why there would have been a problem searching the deleted objects container by the WKGUID. Perhaps the bind wasn't done with a Domain Admin account? Joe K. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick Sent: Friday, April 08, 2005 2:00 PM To: [email protected] Subject: RE: [ActiveDir] More LDP issues I believe the WKGUID= format is only decoded by ADSI, not LDAP. You need to specify the correct DN of the deleted object. Items in the deleted objects container have DNs of the form CN=<original cn>\0ADEL:f3c336a8-0652-47c9-8965-aa3ec83a998e,CN=Deleted Objects,DC=<yourdomain>,DC=com. The guid segment of the DN is the objectGuid of the deleted object, in string form, not escaped binary. If you don't know the guid, you might start by doing a one level search on the deleted items container and locating the correct object in the results that way. -gil -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Friday, April 08, 2005 10:09 AM To: ActiveDir (E-mail) Subject: [ActiveDir] More LDP issues I'm trying to look in the deleted objects container in my domain using ldp. I've entered the OID control of 1.2.840.113556.1.4.417 and i think i've set everything up correctly. But i keep getting this error- ldap_search_ext_s(ld, "<WKGUID=18E2EA80684F11D2B9AA00C04F79F805,DC=CHARMERNYDOM,DC=CSG-IT,DC=N ET>", 2, "(objectclass=*)", NULL, 0, svrCtrls, ClntCtrls, 600000000, 1200 ,&msg) Error: Search: No Such Object. <32> Result <32>: 0000208D: NameErr: DSID-03100198, problem 2001 (NO_OBJECT), data 0, best match of: '' Matched DNs: Getting 0 entries: any help? thanks List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
