Don't like ads? PRO users don't see any ads ;-)
Guest

Untitled

By: a guest on May 8th, 2012  |  syntax: None  |  size: 2.05 KB  |  hits: 15  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. Extending AD Schema - Unable to update due to constraint
  2. D:Shared>ldifde -i -v -f attr3.ldf -j .
  3. Connecting to "myDomain.com"
  4. Logging in as current user using SSPI
  5. Importing directory from file "attr3.ldf"
  6. Loading entries
  7. 1: CN=myAttribute,CN=Schema,CN=Configuration,DC=myDomain,DC=com
  8. Entry modified successfully.
  9.  
  10.  
  11. 1 entry modified successfully.
  12.  
  13. The command has completed successfully
  14.  
  15. D:Shared>
  16.        
  17. C:Usersupdate.vbs(8, 1) Active Directory: The requested operation did not
  18. satisfy one or more constraints associated with the class of the object.
  19.        
  20. #attr3.ldf
  21. #adding my new attribute
  22. dn: CN=myAttribute,CN=Schema,CN=Configuration,DC=myDomain,DC=com
  23. changetype: add
  24. objectClass: top
  25. objectClass: attributeSchema
  26. cn: my-Attribute
  27. distinguishedName: CN=my-Attribute,CN=Schema,CN=Configuration,DC=myDomain,DC=com
  28. instanceType: 4
  29. whenCreated: 20100401175340.0Z
  30. whenChanged: 20100401175341.0Z
  31. uSNCreated: 24154
  32. attributeID: 2.16.840.1.113805.111
  33. attributeSyntax: 2.5.5.12
  34. isSingleValued: TRUE
  35. rangeLower: 0
  36. rangeUpper: 1
  37. uSNChanged: 24163
  38. showInAdvancedViewOnly: TRUE
  39. adminDisplayName: my-Attribute
  40. adminDescription: my-Attribute
  41. oMSyntax: 64
  42. searchFlags: 0
  43. lDAPDisplayName: myAttribute
  44. name: my-Attribute
  45. schemaIDGUID:: tonVW6suWUu1Gev/D1pI9Q==
  46. isMemberOfPartialAttributeSet: TRUE
  47. objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=myDomain,DC=com
  48.  
  49. #The following attributes were removed because I was getting:
  50. #Add error on entry starting on line 1: Unwilling To Perform
  51. #The server side error is: 0x20e7 The modification was not permitted for security
  52. #reasons.
  53. #The extended server error is:
  54. #000020E7: SvcErr: DSID-03152D2C, problem 5003 (WILL_NOT_PERFORM), data 0
  55.  
  56. #objectGUID:: eTKYtnXbCE2fPMgc8UIe0w==
  57. #attributeSecurityGUID:: VAGN5Pi80RGHAgDAT7lgUA==
  58.        
  59. 'update.vbs
  60. Set objUser = GetObject("LDAP://CN=John Lennon,CN=Users,DC=myDomain,DC=com")
  61. objUser.myAttribute="someValue"  'Also tried with integers but not luck
  62. objUser.SetInfo
  63.        
  64. # Define your attribute
  65.  
  66. # Reload the schema
  67. dn:
  68. changetype: modify
  69. add: schemaUpdateNow
  70. schemaUpdateNow: 1
  71. -
  72. # modify user class