LDAP Controls and Session Support

While session support can be initiated, maintained, and terminated without a single LDAP control or extended operation included in the DSML operations, the typical usage of a DSML session is to support LDAP controls and extended operations, which require a session to handle the multiple request-response communications.

To help determine when DSML sessions are required, LDAP controls and extended operations are categorized into four types:

• Session support required

  For example, a page size control or VLV control.

• Stateless controls

  For example, tombstone, sort, or dirsync controls.

• Unknown controls

  Because the LDAP control mechanism is extensible, you can create a new LDAP control or an extended operation that is not recognized by the DSML V2 server.

• Forbidden controls

  Controls not supported by the server.

The following table lists behavior that can be expected in session and stateless requests.

LDAP Controls and Extended Operations supported by Active Directory

The following table lists the set of LDAP controls and extended operations that are currently supported in Active Directory.