[cifs-protocol] "description" attribute in AD

[Edgar Olougouna]

Matthias,

Thanks for your inquiry regarding the "description" attribute in AD. The case number for this question is 110102774074009. One of our engineers will be in touch with you shortly.

Regards,
Edgar

-----Original Message-----
From: Matthias Dieter Wallnöfer [mailto:mdw at samba.org] 
Sent: Wednesday, October 27, 2010 3:11 PM
To: Interoperability Documentation Help
Cc: cifs-protocol at samba.org
Subject: "description" attribute in AD

Hi dochelp team,

the "description" attribute in AD seems very special. Altough defined as multi-valued in the schema it's defacto single-valued.

That means:
- on LDAP entry add operations you are able to set it multi-valued
- on LDAP entry change operations you aren't - e.g. if you try to replace it multi-valued or perform a multi-valued add you get ERR_ATTRIBUTE_ALREADY_EXISTS.

As far as I know I didn't find much in the docs about this strange behaviour and as far as I can tell it only applies to "description". It would be nice to enhance MS-ADTS regarding it and to start some investigation if it wouldn't be better to really define it as single-valued in the schema.

Greets,
Matthias