You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-netapp-files/lightweight-directory-access-protocol-schemas.md
+6-9Lines changed: 6 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -66,26 +66,23 @@ In smaller environments, this doesn't cause issues. But in larger environments (
66
66
67
67
Attributes are indexed via [the `searchFlags` value](/openspecs/windows_protocols/ms-adts/7c1cdf82-1ecc-4834-827e-d26ff95fb207) for the attribute object, which is configurable via [ADSI Edit](/windows/win32/adsi/about-adsi) in the Schema naming context. Access to ADSI Edit should be approached with caution and requires at minimum [Schema Admin](/services-hub/unified/health/remediation-steps-ad/remove-all-members-from-the-schema-admins-group-unless-you-are-actively-changing-the-schema) privileges.
68
68
69
-
70
-
:::image type="content" source="./media/lightweight-directory-protocol-schemas/____.png" alt-text="Screenshot of connection settings menu." lightbox="./media/lightweight-directory-protocol-schemas/____.png":::
71
-
69
+
:::image type="content" source="./media/lightweight-directory-access-protocol-schemas/connection-settings.png" alt-text="Screenshot of connection settings menu." lightbox="./media/lightweight-directory-access-protocol-schemas/connection-settings.png":::
72
70
73
71
By default, the uid attribute object’s `searchFlags` are set to 0x8 (PRESERVE_ON_DELETE). This default setting esnures that even if the object in Active Directory is deleted, the attribute value remains stored in the directory as a historical record of the user’s attribute.
74
72
75
-
:::image type="content" source="./media/lightweight-directory-protocol-schemas/____.png" alt-text="Screenshot of uid properties menu." lightbox="./media/lightweight-directory-protocol-schemas/____.png":::
73
+
:::image type="content" source="./media/lightweight-directory-access-protocol-schemas/search-flag-no-index.png" alt-text="Screenshot of uid properties menu." lightbox="./media/lightweight-directory-access-protocol-schemas/search-flag-no-index.png":::
76
74
77
75
In comparison, an attribute that is indexed in Active Directory for LDAP searches would have the value of 0x1 (or some combination including that value), such as the uidNumber:
78
76
79
-
:::image type="content" source="./media/lightweight-directory-protocol-schemas/____.png" alt-text="Screenshot of UiDNumber properties menu." lightbox="./media/lightweight-directory-protocol-schemas/____.png":::
77
+
:::image type="content" source="./media/lightweight-directory-access-protocol-schemas/number-properties.png" alt-text="Screenshot of UiDNumber properties menu." lightbox="./media/lightweight-directory-access-protocol-schemas/number-properties.png":::
80
78
81
79
Because of this, queries for uidNumber return faster than queries for uid. For consistency and performance, you can adjust the `searchFlags` value for uid to 9 by adding 0x1 along with the existing value of 0x8, which is (INDEX | PRESERVE_ON_DELETE). This addition maintains the default behavior while adding attribute indexing to the directory.
82
80
83
-
:::image type="content" source="./media/lightweight-directory-protocol-schemas/____.png" alt-text="Screenshot of integer attribute editor." lightbox="./media/lightweight-directory-protocol-schemas/____.png":::
84
-
85
-
:::image type="content" source="./media/lightweight-directory-protocol-schemas/____.png" alt-text="Screenshot of uid properties menu with indexing added." lightbox="./media/lightweight-directory-protocol-schemas/____.png":::
81
+
:::image type="content" source="./media/lightweight-directory-access-protocol-schemas/integer-attribute-editor.png" alt-text="Screenshot of integer attribute editor." lightbox="./media/lightweight-directory-access-protocol-schemas/integer-attribute-editor.png.png":::
86
82
87
-
With indexing added, searches for user attributes with uid are as fast as searches for other indexed attributes.
83
+
:::image type="content" source="./media/lightweight-directory-access-protocol-schemas/search-flag-indexed.png" alt-text="Screenshot of uid properties menu with indexing added." lightbox="./media/lightweight-directory-access-protocol-schemas/search-flag-indexed.png":::
88
84
85
+
With indexing, searches for user attributes with uid are as fast as searches for other indexed attributes.
0 commit comments