3.1.4.1 wsen:Enumerate
This section defines the directory services extensions to the Enumerate request and response message defined in WS-Enumeration [WSENUM] section 3.1.
The Instance header defined in [MS-ADDM] section 2.5.1 MUST be attached by the requestor to a WS-Enumeration [WSENUM] Enumerate request message containing an <ad:instance> payload to inform the server about the directory instance targeted. See section 4.1 for an example of how the header is attached in an Enumerate request.
For the /soapenv:Envelope/ soapenv:Body/ wsen:Enumerate/ wsen:Filter/ element defined in WS-Enumeration [WSENUM] section 3.1, the filter expression language supported by [MS-WSDS] is "LdapQuery" defined in section 3.1.4.1.1.1 and identified by the following URI:
http://schemas.microsoft.com/2008/1/ActiveDirectory/Dialect/LdapQuery
The URI stated previously MUST be the value of the /soapenv:Envelope/ soapenv:Body/ wsen:Enumerate/ wsen:Filter/ @Dialect attribute specified in WS-Enumeration [WSENUM] section 3.1.
The wsen:Filter element is optional. If the wsen:Filter element is absent in the request (that is, no query filter has been provided in the request), the server SHOULD use the following Ldap query filter by default.
-
<wsen:Filter Dialect="http://schemas.microsoft.com/2008/1/ActiveDirectory/Dialect/LdapQuery "> <adlq:LdapQuery> <adlq:Filter> (objectClass=*) </adlq:Filter> <adlq:BaseObject> <Default domain NC DN> </adlq:BaseObject> <adlq:Scope> subtree </adlq:Scope> </adlq:LdapQuery> </wsen:Filter>
The WS-Enumeration [WSENUM] Enumerate request can specify the expiration time of the request as a specific time or duration type. If the wsen:Expires element specifying expiration time is absent in the request, meaning indefinite lifetime for the enumeration, it is up to the server to grant such enumeration.<7>
WS-Enumeration [WSENUM] also specifies for the Enumerate response that the expiration time can be either an absolute time or a duration but should be of the same type as the requested expiration.<8>