how to add a non-single valued attribute, like memberOf

Daniel Lutz daniel.lutz at switch.ch
Thu Nov 9 02:20:51 EST 2017


Clayton [08.11.17 23:51]:
> So, what's the most correct OID?  Why are there Syntax and Numeric ones?

You can find a description of ActiveDirectory's attribute 'memberOf' here:

  https://msdn.microsoft.com/en-us/library/ms677099(v=vs.85).aspx

The OID dedicated to this attribute (assigned by Microsoft) is 1.2.840.113556.1.2.102.
So it's probably best to use this OID.

Be aware that this attribute is specific to the ActiveDirectory, and the SP needs
to know about this attribute and its values. (So its usage is probably limited
to your own SPs.)

-- Daniel


More information about the users mailing list