LDAP objectClass and objectCategory

Microsoft Active Directory

Quan busques la manera de identificar la classe de un objecte LDAP Active Directory ens trobem 2 variables:

• objectClass
• objectCategory

Exemples:

He trobat la següent informació a Microsoft:
objectClass
Each instance of an object class has a multi-valued objectClass property that identifies the class of which the object is an instance, as well as all structural or abstract superclasses from which that class is derived.
Thus, the objectClass property of a user object would identify the top, person, organizationalPerson, and user classes.
The objectClass property does not include auxiliary classes in the list. The system sets the objectClass value when the object instance is created and it cannot be changed.
Important  The objectClass attribute is not indexed (Nota: A la pàgina origen - a baix - hi ha un comentari que diu que si indexa des de Windows 2008).

objectCategory
Each instance of an object class also has an objectCategory property, which is a single-valued property that contains the distinguished name of either the class of which the object is an instance or one of its superclasses.
When an object is created, the system sets its objectCategory property to the value specified by the defaultObjectCategory property of its object class. An object's objectCategory property cannot be changed.

To locate objects of a given class, use the objectCategory attribute, which is single-valued and indexed.
For most classes, the defaultObjectCategory is the distinguished name of the class's classSchema object. For example, the defaultObjectCategory for the organizationalUnit class is "CN=Organizational-Unit,CN=Schema,CN=Configuration,<DC=forestroot>". However, some classes refer to another class as their defaultObjectCategory. This allows a query to readily find groups of related objects, even if they are of differing classes. For example, the user, person, organizationalPerson, and contact classes all identify the person class in their defaultObjectCategory properties. This allows search filters like (objectCategory=person) to locate instances of all these classes with a single query. Queries for people are very common, so this is a simple optimization.

From:
http://msdn.microsoft.com/en-us/library/windows/desktop/ms677612(v=vs.85).aspx

Enllaços relacionats:

• Obtenir el objectSID
• LDAP Errors
• LDAP attributes
• Technet Microsoft