GDS makes use of three operational attributes:
· DSX_A_MASTER_KNOWLEDGE
Contains the distinguished name of the DSA that holds the master copy of a specific entry
· DSX_A_ACL
Used for GDS access control
· DS_A_USER_PASSWORD attribute of a DS_O_DSA object class
Used by the GDS shadowing mechanism.
The DSX_A_MASTER_KNOWLEDGE and DSX_A_ACL attributes are present in every GDS entry. When an application requests all attributes, it may prevent any of these three attributes from being returned by setting the DSX_PREFER_ADM_FUNCS service control (OM class DSX_C_GDS_CONTEXT) to OM_FALSE. Certain GDS applications, such as GDS administration, may need these attributes. They can achieve this by setting this service control to OM_TRUE.