Ridiculous problem

[j***@gmail.com]

Ok, I've rarely been driven this insane by a seemingly simple problem.
I'm trying to query the highestCommittedUSN in rootDSE. Seemingly
simple enough I'm using this code:

DirectorySearcher searcher = new DirectorySearcher();
searcher.SearchRoot= new DirectoryEntry("LDAP://rootDSE");
SearchResultCollection results;
results = searcher.FindAll();

...and I'm getting the following error

"The provider does not support searching and cannot search
LDAP://rootDSE"

Now, I've also tried a different SearchRoot 'format'.....
searcher.SearchRoot= new DirectoryEntry("LDAP://domain.com/rootDSE");

and using FindOne().....
SearchResult results;
results = searcher.FindOne();

and different authentication...
searcher.SearchRoot= new
DirectoryEntry("LDAP://rootDSE","Administrator","word123",AuthenticationTypes.Secure);


The code has been documented many times in other threads and it SEEMS
as though this should work.

I've no problem searching for any other DN, container, user, computer,
or otherwise.

OS: Windows2000 Advanced Server SP3
.NET: 1.1
VS.NET 2003

[Joe Kaplan (MVP - ADSI)]

Any reason why you have to use the searcher? The attribute is just a string
and is easy to marshal with the DirectoryEntry:

DirectoryEntry entry = new DirectoryEntry("LDAP://localhost/rootDSE");
Console.WriteLine("highest committed usn: {0}", (string)
entry.Properties["highestCommittedUSN"].Value);

That worked fine on my local ADAM instance.

I'm not actually sure if ADSI will let you build a DirectorySearcher against
RootDSE, but you shouldn't need to.

Joe K.

Post by j***@gmail.com
Ok, I've rarely been driven this insane by a seemingly simple problem.
I'm trying to query the highestCommittedUSN in rootDSE. Seemingly
DirectorySearcher searcher = new DirectorySearcher();
searcher.SearchRoot= new DirectoryEntry("LDAP://rootDSE");
SearchResultCollection results;
results = searcher.FindAll();
...and I'm getting the following error
"The provider does not support searching and cannot search
LDAP://rootDSE"
Now, I've also tried a different SearchRoot 'format'.....
searcher.SearchRoot= new DirectoryEntry("LDAP://domain.com/rootDSE");
and using FindOne().....
SearchResult results;
results = searcher.FindOne();
and different authentication...
searcher.SearchRoot= new
DirectoryEntry("LDAP://rootDSE","Administrator","word123",AuthenticationTypes.Secure);
The code has been documented many times in other threads and it SEEMS
as though this should work.
I've no problem searching for any other DN, container, user, computer,
or otherwise.
OS: Windows2000 Advanced Server SP3
.NET: 1.1
VS.NET 2003

[j***@gmail.com]

Feeling pretty silly now. I guess once one gets in a mindset, it hard
to get perspective.

Thanks,
Q.M.

[Joe Kaplan (MVP - ADSI)]

LOL, I feel your pain. I actually spent about an hour trying to figure out
a syntax that would allow a DirectorySearcher to be built against the
rootDSE object and could not find a way to do it. There are some valid
applications for that and it seems like it should be possible.

Part of the problem might be that RootDSE isn't a real DN from the LDAP
perspective, it is a magic ADSI name that ADSI uses to know when to do a
special kind of search (base level search against the null base DN with a
list of the rootDSE operational attributes to be specific).

However, some aspect of that seems to preclude its usage with the
DirectorySearcher. I even tried some hack tricks of using the GC provider
with port 389 hard-coded. I got further, but then had trouble getting the
schema to load correctly.

So it goes...

Joe K.

Post by j***@gmail.com
Feeling pretty silly now. I guess once one gets in a mindset, it hard
to get perspective.
Thanks,
Q.M.

[Stefan]

The DirectorySearcher works also without specifying the root.
You can retrieve objects and attributes with the entire domain
as search scope.
(I get the same exception using LDAP://RootDSE).

Post by j***@gmail.com
Feeling pretty silly now. I guess once one gets in a mindset, it hard
to get perspective.
Thanks,
Q.M.

[Marc Scheuner [MVP ADSI]]

Post by j***@gmail.com
Ok, I've rarely been driven this insane by a seemingly simple problem.
I'm trying to query the highestCommittedUSN in rootDSE. Seemingly
DirectorySearcher searcher = new DirectorySearcher();
searcher.SearchRoot= new DirectoryEntry("LDAP://rootDSE");
SearchResultCollection results;
results = searcher.FindAll();
...and I'm getting the following error
"The provider does not support searching and cannot search
LDAP://rootDSE"

If you want to read a property from the RootDSE entry, why are you
trying to search on it??

You should just bind to the RootDSE entry and then read the property:


DirectoryEntry deRoot = new
DirectoryEntry("LDAP://domain.com/rootDSE");

object oHighest = deRoot.Properties["highestCommittedUSN"].Value;



That should do the trick!
Marc