Page tree

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


Object class is a critical LDAP concept that determines type of an object. However, contrary to most other LDAP servers, it looks like it was too difficult for AD developers to work with multi-valued objectClass. Therefore AD introduced a proprietary concept of object category. Object category is single-valued and it is somehow determined from object class. It is quite clear how default object category is set, but all the details are not clear (they may to too ghastly to explore).

What is The important thing is , that object class is not properly indexed. Therefore there are several recommendations to use object category for searches instead of object class. This in fact needs to be still combined with object class to get reliable information. Like this: