LEX Online Manual Content

Editor for Microsoft DN with Binary Attributes

This editor is used to show, edit or create Microsoft DN with Binary attributes. Such LDAP attributes are used quite exclusively in Microsoft Active Directory environments.

Editor for Microsoft DN with Binary attributes

In the top area of this dialog, you see the distinguished name and type icon for the object whose attribute your are editing. In the line beneath, the attribute name is shown.

Attributes with the Microsoft proprietary syntax 'DN with Binary' consists of two value: A distinguished name and a binary value. You can enter the binary value as an hex string in the Data text box, and the distinguished name in the Object text box.

The Trustee text box can be used to enter a distinguished name directly - or you use the Browse button and choose an object from a object select browser.

The text box for the trustee's name has also the ability to quick-search objects when you enter names are parts of names which can be used to find them. When the Check Names button is active, you just have to enter a string and LEX will automatically search for directory objects which match to this string. If more than one objects match to the search string, then an additional dialog lets you choose the object from a list:

DN edit with auto check names select list

The search for this objects is done with the same criteria as in the simple search function when you use the Directory Search dialog. If you chose the object from the list, or if you entered directly the full distinguished name of an object, then LEX realizes that the string in the text box is a real DN, it is underline to show that LEX matches this information internally. If the Check Names button is inactive, you can always try to resolve the string you entered into an objects DN by pressing F5.

If you want to see the distinguished name in the text box in a shorter, more readable form, you can activate the Show friendly object names button . This is the same feature which is used also in the LEX main windows object list.

DN edit with friendly names

When you are in the mode where the distinguished names are displayed as short relative names, you can move your mouse over the regarding objects name: A popup text line will show you the complete distinguished name:

Full info for friendly names

Editing the raw data

If you opened a DNwithBinary attribute with this editor dialog, you can also display and edit the data in it's basic form if you want: Just press on the Raw label in the bottom left corner of the dialog. The editor is switched to an text editor then:

Editing the raw MS DNwithBinary data

The DNwithBinary attribute syntax describes basically a string value which is a combination of a distinguished name and a binary value in the following form:

B:<len>:<hexstring>:<dn>

An Example:
B:32:18E2EA80684F11D2B9AA00C04F79F805:CN=DeletedObjects,DC=cerrotorre,DC=de

The <len> value is the character length of the hexstring value (not the length of the binary value itself!).

When will the Microsoft DN with binary editor will be used?

The editor for DNwithBinary attributes is used whenever LEX has valid schema information and detects the following official attribute syntax:

1.2.840.113556.1.4.903	Object(DN-Binary) {MS}
2.5.5.7	Object(DN-Binary) {MS}