Skip to content

AdminDescription = $NULL result in a "unintended" ADMF update event #52

Description

@AndiBellstedt

The following PSD1 file for schema attributes will result in a "unintended" update event;

Forest schema definition file

@{
        OID = '1.2.840.113556.1.4.2329'
        Name = 'ms-DS-Key-Credential-Link-BL'
        AdminDisplayName = 'ms-DS-Key-Credential-Link-BL'
        LdapDisplayName = 'msDS-KeyCredentialLink-BL'
        OMSyntax = 127
        AttributeSyntax = '2.5.5.1'
        SingleValued = $False
        AdminDescription = $Null
        SearchFlags = 0
        ObjectClass = $Null
        IsDefunct = $False
        Optional = $False
        ContextName = ''
        AdvancedView = $True
}

ADMF "change"-event

Type          : Update
ObjectType    : Schema
Identity      : ms-DS-Key-Credential-Link-BL
Changed       : {adminDescription -> }

AD schema attribue

Attribute "adminDescription" in AD schema is empty and not returned by Get-ADObject

>Get-ADObject -Filter 'Name -eq "ms-DS-Key-Credential-Link-BL"' -SearchBase $schemaNC -Properties * | Format-List *Descr*


Description          :
nTSecurityDescriptor : System.DirectoryServices.ActiveDirectorySecurity

ADMF version: 1.13.98
ForestManagement version: 1.5.71

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions