AD created attribute lookup from bound OSX server

[ObiWein]

I'm experiencing a pretty weird problem and any input that you can give
me would be appreciated. Thanks.

I created a new attribute in the schema called testid. There is an OSX
server that is bound to the AD domain. When doing a lookup on an
account from the OSX server for an AD Domain admin account it correctly
returns the value for testid. Doing the exact same user query for a
regular user does not return the testid value. Adding the regular user
account to the domain admin group and then running the query again
returns the correct value for testid.

What am I missing that this works only for admins and not regular
users?

 

[Joe Richards [MVP]]

You aren't looking at the permissions to view the attribute. It would seem that
normal users don't have the permission to see that attribute on the specific object.

joe