SortKey Control (LDAP_SERVER_SORT_OID) and constructed attribute "msDS-ReplValueMetaData"

Question

Can the SortKey control ( [MS-ADTS].pdf -> 3.1.1.3.4.1.13 LDAP_SERVER_SORT_OID ) be applied to constructed attributes, such as 'msDS-ReplValueMetaData' as well? I want to search the metadata for linked attributes. For groups with several 10.000 members, this is time-consuming. For the 'member' attribute, either 'pszObjectDn' could be returned in ascending order for a b-tree search or 'usnLocalChange' in descending order for the latest changes in Page 'range=0-999'.

A dirSync search returns only changed members. I would like to read out the metadata for changed linked values as soon as possible.

/Volker

Answer 1

Hi Volker,

I've tested it on a Windows 2019 DC, and it doesn't support the sort control with a constructed attribute. If you do include the control specifying the msDS-ReplValueMetaData attribute you get the following error:

Error: (0x0C) The control is critical and the server does not support the control, Server Error: 0000217A: SvcErr: DSID-03140452, problem 5010 (UNAVAIL_EXTENSION), data 0, Ext Error: (8570) The sort order requested is not supported.

I think the return order is based on the last changed returned first.

Gary.