2.3.4.2 LDAP Entry for Domainv2-Based DFS Namespace

A DFS namespace LDAP entry exists for each domainv2-based DFS namespace under the DFS namespace anchor LDAP entry.

This object has the following attributes. The schemas for these attributes are specified in [MS-ADA2].

Attribute	Description
msDFS-SchemaMajorVersion	An integer value that contains the major version number of the DFS metadata format supported.
msDFS-SchemaMinorVersion	An integer value that contains the minor version number of the DFS metadata format supported. The rangeLower attribute of the attribute schema's LDAP entry contains 0, and the rangeUpper attribute of the attribute schema's LDAP entry contains the highest minor version number supported.
msDFS-NamespaceIdentityGUIDv2	This is the time-stable identifier for a DFS namespace. It is a binary value set at DFS namespace creation time whose size is specified by the rangeLower and rangeUpper attributes.
msDFS-GenerationGUIDv2	A binary value whose size is specified by the rangeLower and rangeUpper attributes. This time-stable identifier is overwritten anytime the LDAP entry corresponding to the DFS namespace or the DFS link is modified. This is reserved for future use and MUST NOT be currently used.
msDFS-LastModifiedv2	A time string format defined by ASN.1 standards, as specified in [X680]. The Coordinated Universal Time (UTC) in the form YYYYMMDDHHMMSS.0Z"0Z" indicates no time differential. This attribute is updated each time the DFS root is updated.
msDFS-Ttlv2	A 32-bit signed integer that is interpreted as an unsigned referral Time to Live (TTL), in seconds.
msDFS-TargetListv2	This attribute stores the DFS target information. The information is stored as an XML document that contains a list of targets for the root as well as attributes associated with each target. The maximum size is 2 MB. For the XML schema of the XML document, see Appendix C.
msDFS-Propertiesv2	This is a multivalued attribute that contains attributes corresponding to the DFS root. Each attribute is a case-insensitive String(Unicode) (see [MS-ADTS] section 3.1.1.2.2.2).
msDFS-Commentv2	An optional attribute that contains a comment associated with the DFS namespace root. A String(Unicode) (see [MS-ADTS] section 3.1.1.2.2.2).

Attribute values for msDFS-Propertiesv2 are described in the following table. A server MUST ignore unrecognized attribute values when reading the metadata. A server SHOULD<19> preserve unrecognized attribute values when writing the metadata. Note that they are fixed strings. They have a more general appearance, but a string comparison is sufficient to analyze them. The absence of an attribute value in the msDFS-Propertiesv2 attribute indicates that the corresponding property is not set.

For domainv2-based DFS namespaces, the msDFS-Propertiesv2 attribute parallels the functionality of the DFSRootOrLinkIDBLOB (section 2.3.3.1.1.2) Type field used for domainv1-based namespaces.

Attribute Value	Description
ABDE=on	The Access Based Directory Enumeration (ABDE) mode property. Enables ABDE mode.
InsiteReferral=on	The DFS in-site referral mode property. When set, instructs the DFS server to enable the DFS in-site referral mode.
ReferralSiteCosting=on	The DFS referral site costing property. Enables DFS referral site costing and SHOULD be supported.<20>
RootScalability=on	The DFS root scalability mode property. This enables DFS root scalability mode and SHOULD be supported.<21>
TargetFailback=on	The DFS client target failback property. This enables DFS client target failback for targets of this root and SHOULD be supported.<22>
State=Okay	The DFS root is available for referral requests.

The following attributes are mandatory: msDFS-SchemaMajorVersion, msDFS-SchemaMinorVersion, msDFS-NamespaceIdentityGUIDv2, msDFS-GenerationGUIDv2, msDFS-LastModifiedv2, msDFS-Ttlv2, msDFS-TargetListv2, and msDFS-Propertiesv2.

The msDFS-Commentv2 attribute is optional.

The object class of the LDAP entry corresponding to the domainv2-based DFS namespace is msDFS-Namespacev2, and its schema is specified in [MS-ADSC].