LDAP - Retrieve a list of all attributes/values?

Viewed 108134

Is it possible to retrieve a list of all attributes/values from LDAP without specifying, if so how can this be possible?

7 Answers

ADSI Edit is a great tool to help you figure stuff out. In this case, you are after Schema data. When you open ADSI Edit, you choose "Connect to..." and then for the well known Naming Context you select "Schema"... now you can take a look at the different schema classes: (subSchema, classSchema, attributeSchema) ...

What's tricky is knowing you need to choose a classSchema, then get its "schemaIDGUID" ... then you do a search on all attributeSchema and filter on "schemaIDGUID"

Ex. If you choose to look at "CN=User" you'll notice the schemaIDGUID == bf967aba-0de6-11d0-a285-00aa003049e2

Then if you choose to look at "CN=Pwd-Last-Set" you'll notice the schemaIDGUID matches....

With all this being said, it's probably far easier to use ActiveDirectorySchemaClass (as David has answered) but I felt like sharing some knowledge.

Related