Note that there are some explanatory texts on larger screens.

plurals
  1. POAdd LDAP entry to Active Directory via ext/ldap
    primarykey
    data
    text
    <p>Using ext/ldap I'm trying to add entries to an Active Directory. As long as I only use one single structural objectClass everything works as expected, but as soon as I try to add an entry with a second auxiliary objectClass, the server reports an error:</p> <blockquote> <p>Server is unwilling to perform; 00002040: SvcErr: DSID-030F0AA0, problem 5003 (WILL_NOT_PERFORM), data 0</p> </blockquote> <p>The following code works:</p> <pre><code>ldap_add($ldap, 'OU=Test,OU=Test,DC=domain,DC=example,DC=local', array( 'ou' =&gt; 'Test', 'objectClass' =&gt; 'organizationalUnit', 'l' =&gt; 'location' )); </code></pre> <p>This doesn't:</p> <pre><code>ldap_add($ldap, 'OU=Test,OU=Test,DC=domain,DC=example,DC=local', array( 'ou' =&gt; 'Test', 'associatedDomain' =&gt; 'domain', 'objectClass' =&gt; array('organizationalUnit', 'domainRelatedObject'), 'l' =&gt; 'location' )); </code></pre> <p>The same happens if I try to add an auxiliary objectClass to an existing entry:</p> <pre><code>ldap_mod_add($ldap, 'OU=Test,OU=Test,DC=domain,DC=example,DC=local', array( 'associatedDomain' =&gt; 'domain', 'objectClass' =&gt; 'domainRelatedObject' )); </code></pre> <p>The corresponding error message is essentially the same</p> <blockquote> <p>Server is unwilling to perform; 00002040: SvcErr: DSID-030508F8, problem 5003 (WILL_NOT_PERFORM), data 0</p> </blockquote> <p>As all other updating and adding operations work, I think the problem must be related to the objectClass attribute. </p> <p>As I've not enough experience with Active Directories (I'm used to OpenLDAP): Are there any known issues with objectClasses in Active Directory? Am I missing something here? Are there any restrictions that disallow adding e.g. <code>domainRelatedObject</code> to an <code>organizationalUnit</code>? What the heck 's going on here ;-)?</p> <p><em>Just in case you're wondering: the <code>domainRelatedObject</code> is present in the Active Directory schema.</em></p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload