### Advanced Administration Operations

GDS makes use of three operational attributes:

· DSX_A_MASTER_KNOWLEDGE

Contains the distinguished name of the DSA that holds the master copy of a specific entry

· DSX_A_ACL

Used for GDS access control

· DS_A_USER_PASSWORD attribute of a DS_O_DSA object class

Used by the GDS shadowing mechanism.

The DSX_A_MASTER_KNOWLEDGE and DSX_A_ACL attributes are present in every GDS entry. When an application requests all attributes, it may prevent any of these three attributes from being returned by setting the DSX_PREFER_ADM_FUNCS service control (OM class DSX_C_GDS_CONTEXT) to OM_FALSE. Certain GDS applications, such as GDS administration, may need these attributes. They can achieve this by setting this service control to OM_TRUE.

##