Michael Str�der wrote: > Rich Megginson wrote: > >> >> It may "know" about operational attributes, either by hard coding >> them or by reading the schema. > > > Hmm, for determining all available attributes by looking at sub schema > sub entry one has to know all object classes of an entry.
That's for non-operational attrs. For operational attrs (at least in Netscape/iPlanet DS), any operational attribute may be present in any entry, regardless of schema. I'm not sure how Novell DS or MS AD implements support for operation attributes. > But some are hidden too (e.g. passwordObject). I'm not sure what you mean. Is passwordObject an objectclass? And it is not listed in the schema? > > > Ciao, Michael. >
