5.16.2.1 Object(DS-DN)

A value with the Object(DS-DN) syntax is a UTF-8 string in the following format:

<GUID=guid_value>;<SID=sid_value>;dn

where:

• guid_value is the value of the object's objectGUID attribute.

• sid_value is the value of the object's objectSid attribute in its binary format (as specified in [MS-DTYP] section 2.4.2).

• dn is the string representation of a DN (as specified by [RFC2252] section 6.9, and further specified by [RFC2253]).

For reference to objects that do not have an objectSid, the format is as follows:

<GUID=guid_value>;dn

where guid_value and dn have the same meaning as in the previous case.