[cifs-protocol] Virtual List View with timestamps (syntax

Douglas Bagnall douglas.bagnall at catalyst.net.nz
Mon Mar 14 22:41:08 UTC 2016

hi Dochelp,

When I search Windows 2012R2 Active Directory with VLV, I get a strange
result with "greater than or equal" queries on attributes with syntax (for example msTSExpireDate4). If the search values is greater
than any of the attribute values, AD returns values from the beginning
of the sorted list rather than the empty list that it does for other

Supposing there are three user objects with msTSExpireDate4 set to
'19000101010000.0Z', '19010101010000.0Z', and '19020101010000.0Z' (the
years are incrementing). A VLV search with the following parameters:

   attr: msTSExpireDate4
   before: 0
   after: 0
   greater than or equal: 19991231211234.0Z

returns ['19000101010000.0Z'] -- that is the first value. A similar
search using an attribute with a different syntax will return an empty list.

I can't find any reference to this in the documentation, and it seems to
differ from the RFCs. Does this behaviour have a purpose?


More information about the cifs-protocol mailing list