RootDSE searches against Dsfw servers

RootDSE searches (ldapsearch -x -b "" ) against Dsfw Domain Controllers return an LDAP error 32 ( No such object ) when using a search scope other than base

This behavior works as designed and is implemented to mimic Active Directory behavior on Dsfw Domain Controllers. Therefore, search scopes of "sub" and "one" will return an implementation error or no such object error on the default LDAP(S) ports on Dsfw servers. Only a search scope of "base" will work to provide the information contained in the RootDSE.

ldapsearch -s sub -b "" -x -LLL
No such object (32)

Note that eDirectory listens on different LDAP(S) ports on Dsfw servers. These ports are 1389 and 1636 respectively. The RootDSE searches should work fine for all scopes against these ports and should not return the "No such object (32)" error. The information contained in the RootDSE can only be retrieved using the scope of "base" though even with eDirectory LDAP(S) ports.