[python-ldap] AD objectGUID conversion to string

Michael Ströder michael at stroeder.com
Wed Sep 24 10:20:26 CEST 2014


Joseph L. Casale wrote:
>>> Data in AD is typically utf-16 encoded.
>>
>> No! The LDAP interface of MS AD is LDAPv3 compliant and therefore uses UTF-8
>> for LDAP syntax DirectoryString.
> 
> Well, to be specific I referred to data _in_ AD, not data _on the wire_. To be honest
> it wasn't even relevant in this case but more for cases like setting unicodePwd.

Yes, 'unicodePwd' is very badly designed. Double quotes as single-byte ASCII
chars enclosing the UTF-16 low-endian password value. Yuck!

But all other DirectoryString values are simply UTF-8.

Ciao, Michael.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2398 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mail.python.org/pipermail/python-ldap/attachments/20140924/517e6716/attachment.bin>


More information about the python-ldap mailing list