Hi Thorsten, >> ...while the same queries work against an eDirectory and Active >> Directory server. It also seems that LDAP clients have problems >> displaying the RootDSE object: Softerra's six year old LDAP Browser and >> Apache Directory Studio can display the RootDSE object while LDAP Admin >> and LDAPSoft's LDAP Browser can't. What's going on here?
Some clients are more smart and work around the various implementations. > Looks like most clients don't understand or expect Operational > Attributes (whatever that is): See RFC 4512 [1] > "ldapsearch -x -LLL -b "" -s base +" works for ApacheDS - while that of > course fails against Active Directory and eDirectory. Hm. You could always request the attributes you need explicitely, example: "ldapsearch -x -LLL -b "" -s base namingContexts supportedControl" Kind Regards, Stefan [1] http://tools.ietf.org/html/rfc4512#section-3.4
