2.3.3.3 Searching for Print Queues in the Active Directory

  • Article

Print servers also use LDAP to search for print queues in the Active Directory. Print servers perform the following steps to search for print queues:

  • Locate the domain controller and bind to the LDAP server (section 2.3.3.1).

  • Search for print queues with the desired attributes, using the LDAP search operation ([RFC2251] section 4.5). The format of the LDAP search request is defined in [RFC2251]section 4.5.1. The parameters of the search request are set as follows.

    Parameter

    Description

    baseObject

    Print servers SHOULD specify the default naming context retrieved from the root DSE. The root DSE is defined in [MS-ADTS] section 1.1, and the default naming context attribute is specified in [MS-ADTS] section 3.1.1.3.2.3.

    scope

    Print servers SHOULD specify wholeSubtree.

    derefAliases

    Print servers SHOULD specify neverDerefAliases.

    sizeLimit

    This value is dependent on the print server implementation and does not affect the protocol.

    timeLimit

    This value is dependent on the print server implementation and does not affect the protocol.

    filter

    The filter parameter of the search request MUST contain the requirement that the returned objects be of the print queue object class. In the string representation of filters [RFC2254], this requirement is written as "(objectClass = printQueue)". In conjunction with this requirement, the filter can contain any restrictions based on any combination of attributes of the schema for the print queue object class.

    attributes

    The print server can request any set of attributes in the schema, but it SHOULD NOT fail if any optional attribute is missing.

  • Unbind from the LDAP server as described in section 2.3.3.1.

Print servers MAY<233> also search the global catalog (GC) for print queues in other NCs. The GC and naming contexts are defined in section 1.1. The Active Directory implementation of the GC is specified in [MS-ADTS] section 3.1.1.1.8. Print clients use LDAP to perform searches on the GC in the same way as above.

Print servers MAY<234> negotiate encryption of LDAP messages as part of the SASL authentication during the binding process ([MS-ADTS] section 5.1.1.1.2).

If an Active Directory print queue object is enumerated by the search, but the mandatory information specified in section 2.3.2 is not present in that print queue object, the print server SHOULD ignore this object and continue to the next enumerated print queue object.

Print servers can retry failed LDAP search operations.