Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This control is used with an LDAP search operation to retrieve the quota of a user. When used with an LDAP search operation that queries the constructed attributes msDS-QuotaEffective and msDS-QuotaUsed on the msDS-QuotaContainer object, the server will return the quota of the user who is specified by the control, rather than the quota of the user whom the connection is authenticated as.
If the caller attempts to retrieve the quota of a user other than the user whom the caller is authenticated as, and the caller does not have the RIGHT_DS_READ_PROPERTY right on the Quotas container (described in section 6.1.1.4.3), the server returns an empty result set.
If the caller attempts to retrieve the quota of the user whom the caller is authenticated as, and the caller has neither the RIGHT_DS_READ_PROPERTY right on the Quotas container (described in section 6.1.1.4.3) nor the DS-Query-Self-Quota control access right on the Quotas container, the server returns an empty result set.
These access checks are also specified in section 3.1.1.4.4.
When sending this control to the DC, the controlValue field is set to the BER encoding of the following ASN.1 structure.
-
QuotaRequestValue ::= SEQUENCE { querySID OCTET STRING }
Where querySID is the SID, in binary form, of the user whose quota is to be retrieved (the binary form of SIDs is documented in [MS-DTYP] section 2.4.2). Sending this control to the DC does not cause the server to include any controls in its response.