Article ID: 312162
Article Last Modified on 10/27/2006
APPLIES TO
- Microsoft Metadirectory Services 2.1
- Microsoft Metadirectory Services 2.2 Service Pack 1
- Microsoft Metadirectory Services 2.2 Service Pack 1
This article was previously published under Q312162
SYMPTOMS
If you are using Ldifde files that are exported from Microsoft Metadirectory Services (MMS) on Microsoft Windows 2000 Advanced Server to import changes into Active Directory and you are trying to clear attributes, the import files do not work. For example:
dn: CN=testuser,CN=Users,DC=testlab,DC=dan
changetype: modify
replace: givenName
givenName:
-
If you omit the "givenName:" line, the file is imported correctly.
CAUSE
The specified update type writes the attribute with a value that has a length of 0 (zero). There is no clear specification that defines how 0-length attributes should be handled in Lightweight Directory Access Protocol (LDAP). Some popular LDAP directories do accept imports such as this.
After you install this hotfix, MMS uses the delete syntax to remove attributes.
RESOLUTION
A supported fix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Apply it only to computers that are experiencing this specific problem. This fix may receive additional testing. Therefore, if you are not severely affected by this problem, Microsoft recommends that you wait for the next version of Microsoft Metadirectory Services that contains this hotfix.
To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:
NOTE: In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The typical support costs will apply to additional support questions and issues that do not qualify for the specific update in question.
The English version of this fix should have the following file attributes or later:
Date Time Size File name ---------------------------------------- 21-Jan-2002 17:06 97,280 Q312162.exe
The hotfix has the following requirements:
- The MMS server must run the released version of the XML Wizard (this is included with MMS 2.2 SP1) before you install the fix.
- You must run Microsoft Windows Installer 2.0 before you install the fix. Windows Installer 2.0 is available from the following Microsoft Web site:
- Microsoft recommends that the Windows 2000-based Active Directory server on which you import the LDAP Data Interchange Format (LDIF) files be running Windows 2000 Service Pack 2 (SP2) or later.
WORKAROUND
You can change the import file manually, but for scripted imports, changing the syntax is not a practical solution.
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
MORE INFORMATION
The new behavior uses delete directives to import attribute removals, but there may be problems with delete type updates.
According to the LDIF specification, the "replace" method of attribute deletion should always succeed; the explicit "delete" method generates an error if the attribute does not exist. This behavior has the potential to cause errors if the attribute that MMS is attempting to delete has been deleted by a source other than MMS (for example, by an administrator).
If an LDIF file contains "delete:" directives, replaced them with "replace:" directives.
For additional information, click the article number below to view the article in the Microsoft Knowledge Base:
320718 Microsoft Metadirectory Services 2.2 Post SP1 Hotfix List
Additional query words: employeeID givenName initials sn displayName department title peronalTitle Manager company Office telephoneNumber mobile sAMAccountName mail otherTelephone
Keywords: kbbug kbfix kbwin2000presp3fix kbqfe kbwin2000sp3fix kbhotfixserver KB312162
