Microsoft KB Archive/303163

= Error Message: 19084: DS_RC_BASE_DN_TOO_DEEP =

Article ID: 303163

Article Last Modified on 1/25/2006

-

APPLIES TO


 * Microsoft Metadirectory Services 2.1
 * Microsoft Metadirectory Services 2.2 Service Pack 1
 * Microsoft Metadirectory Services 2.2 Service Pack 1

-



This article was previously published under Q303163



SYMPTOMS
The following error message is recorded in your Zscript.log file on a management agent:

0018-FAILED TO CONSTRUCT[19084]: CN=Dlists,CN=Recipients,OU=site1,O=org1,OU=Exchange,dc=Microsoft,dc=com



CAUSE
Some management agents (MAs) contain the zcMaAliasThingLevels attribute. This attribute defines the maximum number of relative distinguished name components (RDNs) that the connector space object may contain. This limit enforces the rules that the connected directory has concerning nesting. For example, in some connected directories, groups cannot nest. In this case, an object cannot be more than two levels below its MA in the connector space: The first level below the MA is the group, the second level below the MA is the object itself. In the absence of this attribute, no limitation on the number of RDNs in a connector object is imposed.

If you look in the \Zoomserv\bin\init\at.st file, you notice that the only MAs that have the zcMaAliasThingLevels attribute preconfigured are:
 * NT (2)
 * VINES (3)
 * NETWARE (2)
 * CCMAIL (2)
 * SAMPLE (2)
 * GWAPI (3)

In each of these directories, there are specific rules that limit the degree of nesting that an object may experience. Because the connector space is designed to be an accurate reflection of the structure of the connected directory, the zcMaAliasThingLevels attribute limits the connector space structure in order to comply with the connected directory conditions.



RESOLUTION
If you are using one of the MAs listed in the &quot;Cause&quot; section of this article, and the number of levels is accurate, you need to reconstruct the Distinguished Name (DN) to reduce the levels in the Construction template. However, if you are using the Exchange Lightweight Directory Access Protocol (LDAP) or another MA that is not list above, this attribute is not set correctly and you have to remove it. You can completely remove this attribute by deleting the attribute. Use the following methods to view and/or remove the zcMaAliasThingLevel attribute on an MA:

Viewing the Attribute Setting on the MA

 * 1) In Compass, log on to Microsoft Metadirectory Services (MMS) as the administrator.
 * 2) Right-click  , and then click View.
 * 3) Click All Attributes.
 * 4) Search for the zcMaAliasThingLevel attribute.

Using LDP to Remove the zcMaAliasThingLevels Attribute
WARNING: If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Exchange 2000 Server, or both. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.

The following example is based on the following assumptions:  The name of the MMS server is:

MMS Server Name

 The MMS administrator's logon ID is:

MMS_application_machine_name@MMS_server_name

 The MMS administrator's password is:

admin_password

 The MMS directory contains the following object:

DsaName=Server,ou=Applications,ou=test,dc=us,dc=microsoft,dc=com



 Run the Ldp.exe utility.</li> On the Connections menu, click Connect.</li> In the Server box, type MMS Server Name .</li> In the Port box, type 389.

The LDAP port may be set to a different number. Verify this value on the MMS server console screen where both the LDAP and HTTP port numbers are displayed.</li> On the Connections menu, click Bind.</li> In the User box, type:

MMS_application_machine_name@MMS_server_name

</li> In the Password box, type admin_password .</li> Click to clear the Domain check box.</li> On the View menu, click Tree</li> Enter the distinguished name of the DSA object:

DsaName=Server,ou=Applications,ou=test,dc=us,dc=microsoft,dc=com

</li> Expand the DSA. The MAs have distinguished names beginning with &quot;ma=&quot;.</li> Right-click an existing MA, and then click Modify.</li> Note that base DN is populated with the correct Management Agent DN.</li> In the Edit Entry attribute box, type zcMaAliasThingLevels .</li> Click the Delete option under Operations.</li> Click the Enter button.</li> The following text should appear in the Entry List dialog box:

[delete]zcMaAliasThingLevels:3

</li> <li>Click Run to run it.</li></ol>

Additional query words: mms metadirectory zoomit

Keywords: kberrmsg kbprb KB303163

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.