|
server
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Zero results returned for uSNchanged search...I'm trying to track changes to AD and whenever I run a search like:
(&(uSNchanged >= lowernumber)(uSNchanged <= hisghestCommittedUSN)) I get zero results....using ldp/aduc/script I am a domain admin, are there any other rights needed to perform this search ? I'm not sure what the second clause really does for you, as that only really
serves exclude the last object updated on the server. Why not start with something like (uSNChanged>=0) and return 10 records and make sure that is working. Then, you can start increasing the value and such. Also, is the typo in the second clause relevant? Joe K. Show quoteHide quote "confused" <confu***@discussions.microsoft.com> wrote in message news:B3FB5EAF-3680-4CC0-8DBA-0303DF9FA52E@microsoft.com... > I'm trying to track changes to AD and whenever I run a search like: > > (&(uSNchanged >= lowernumber)(uSNchanged <= hisghestCommittedUSN)) > > I get zero results....using ldp/aduc/script > > I am a domain admin, are there any other rights needed to perform this > search ? "Joe Kaplan (MVP - ADSI)" wrote: right. yes I have done both. still getting nothing back actually, did:> I'm not sure what the second clause really does for you, as that only really > serves exclude the last object updated on the server. > > Why not start with something like (uSNChanged>=0) and return 10 records and > make sure that is working. Then, you can start increasing the value and > such. > (usnChanged >= *) /* is this the same ? */ and tossed out the upperbound part of the search (I've seen it in other places, but I agree, it's kind of useless). > Also, is the typo in the second clause relevant? no. that's just pseudocode representation. I've checked my code and even > inserted actual values to make sure I'm not going crazy (plus, I have use strict on and warnings in my perl script so I'm pretty sure i'm covered there). Show quoteHide quote > Joe K. > > "confused" <confu***@discussions.microsoft.com> wrote in message > news:B3FB5EAF-3680-4CC0-8DBA-0303DF9FA52E@microsoft.com... > > I'm trying to track changes to AD and whenever I run a search like: > > > > (&(uSNchanged >= lowernumber)(uSNchanged <= hisghestCommittedUSN)) > > > > I get zero results....using ldp/aduc/script > > > > I am a domain admin, are there any other rights needed to perform this > > search ? > > > The only other thing I can think of is that the search base or scope is
wrong (or you didn't bind correctly). I can't replicate your results otherwise. usnChanged>=0 returned as many objects as I asked for. Joe K. Show quoteHide quote "confused" <confu***@discussions.microsoft.com> wrote in message news:F9FF9F0F-EF7B-4CA6-8685-14562CC75EE5@microsoft.com... > > > "Joe Kaplan (MVP - ADSI)" wrote: > >> I'm not sure what the second clause really does for you, as that only >> really >> serves exclude the last object updated on the server. >> >> Why not start with something like (uSNChanged>=0) and return 10 records >> and >> make sure that is working. Then, you can start increasing the value and >> such. >> > > right. yes I have done both. still getting nothing back actually, did: > > (usnChanged >= *) /* is this the same ? */ > > and tossed out the upperbound part of the search (I've seen it in other > places, > but I agree, it's kind of useless). > >> Also, is the typo in the second clause relevant? >> > > no. that's just pseudocode representation. I've checked my code and even > inserted actual values to make sure I'm not going crazy (plus, I have use > strict on and warnings in my perl script so I'm pretty sure i'm covered > there). > >> Joe K. >> >> "confused" <confu***@discussions.microsoft.com> wrote in message >> news:B3FB5EAF-3680-4CC0-8DBA-0303DF9FA52E@microsoft.com... >> > I'm trying to track changes to AD and whenever I run a search like: >> > >> > (&(uSNchanged >= lowernumber)(uSNchanged <= hisghestCommittedUSN)) >> > >> > I get zero results....using ldp/aduc/script >> > >> > I am a domain admin, are there any other rights needed to perform this >> > search ? >> >> >> "Joe Kaplan (MVP - ADSI)" wrote: i've verified the bind and the search scope by changing out the filter> The only other thing I can think of is that the search base or scope is > wrong (or you didn't bind correctly). I can't replicate your results > otherwise. usnChanged>=0 returned as many objects as I asked for. > and getting back the desired results.... thanks Show quoteHide quote > Joe K. > > "confused" <confu***@discussions.microsoft.com> wrote in message > news:F9FF9F0F-EF7B-4CA6-8685-14562CC75EE5@microsoft.com... > > > > > > "Joe Kaplan (MVP - ADSI)" wrote: > > > >> I'm not sure what the second clause really does for you, as that only > >> really > >> serves exclude the last object updated on the server. > >> > >> Why not start with something like (uSNChanged>=0) and return 10 records > >> and > >> make sure that is working. Then, you can start increasing the value and > >> such. > >> > > > > right. yes I have done both. still getting nothing back actually, did: > > > > (usnChanged >= *) /* is this the same ? */ > > > > and tossed out the upperbound part of the search (I've seen it in other > > places, > > but I agree, it's kind of useless). > > > >> Also, is the typo in the second clause relevant? > >> > > > > no. that's just pseudocode representation. I've checked my code and even > > inserted actual values to make sure I'm not going crazy (plus, I have use > > strict on and warnings in my perl script so I'm pretty sure i'm covered > > there). > > > >> Joe K. > >> > >> "confused" <confu***@discussions.microsoft.com> wrote in message > >> news:B3FB5EAF-3680-4CC0-8DBA-0303DF9FA52E@microsoft.com... > >> > I'm trying to track changes to AD and whenever I run a search like: > >> > > >> > (&(uSNchanged >= lowernumber)(uSNchanged <= hisghestCommittedUSN)) > >> > > >> > I get zero results....using ldp/aduc/script > >> > > >> > I am a domain admin, are there any other rights needed to perform this > >> > search ? > >> > >> > >> > > > I have no clue then. I can't repro your results. The only thing I can
think of is that you are spelling something wrong in the filter. Joe K. Show quoteHide quote "confused" <confu***@discussions.microsoft.com> wrote in message news:2D2221B6-BD44-4B3E-A833-D7C49FFF3534@microsoft.com... > "Joe Kaplan (MVP - ADSI)" wrote: > >> The only other thing I can think of is that the search base or scope is >> wrong (or you didn't bind correctly). I can't replicate your results >> otherwise. usnChanged>=0 returned as many objects as I asked for. >> > > i've verified the bind and the search scope by changing out the filter > and getting back the desired results.... > > thanks > > >> Joe K. >> >> "confused" <confu***@discussions.microsoft.com> wrote in message >> news:F9FF9F0F-EF7B-4CA6-8685-14562CC75EE5@microsoft.com... >> > >> > >> > "Joe Kaplan (MVP - ADSI)" wrote: >> > >> >> I'm not sure what the second clause really does for you, as that only >> >> really >> >> serves exclude the last object updated on the server. >> >> >> >> Why not start with something like (uSNChanged>=0) and return 10 >> >> records >> >> and >> >> make sure that is working. Then, you can start increasing the value >> >> and >> >> such. >> >> >> > >> > right. yes I have done both. still getting nothing back actually, >> > did: >> > >> > (usnChanged >= *) /* is this the same ? */ >> > >> > and tossed out the upperbound part of the search (I've seen it in other >> > places, >> > but I agree, it's kind of useless). >> > >> >> Also, is the typo in the second clause relevant? >> >> >> > >> > no. that's just pseudocode representation. I've checked my code and >> > even >> > inserted actual values to make sure I'm not going crazy (plus, I have >> > use >> > strict on and warnings in my perl script so I'm pretty sure i'm covered >> > there). >> > >> >> Joe K. >> >> >> >> "confused" <confu***@discussions.microsoft.com> wrote in message >> >> news:B3FB5EAF-3680-4CC0-8DBA-0303DF9FA52E@microsoft.com... >> >> > I'm trying to track changes to AD and whenever I run a search like: >> >> > >> >> > (&(uSNchanged >= lowernumber)(uSNchanged <= hisghestCommittedUSN)) >> >> > >> >> > I get zero results....using ldp/aduc/script >> >> > >> >> > I am a domain admin, are there any other rights needed to perform >> >> > this >> >> > search ? >> >> >> >> >> >> >> >> >> |
|||||||||||||||||||||||
Other interesting topics