C# + AD LDS - Help interpreting error message


i've written code manage membership of ad lds container using c#. in our testing, error thrown when attempting commit our changes directoryentry if people added. code works fine if these specific users aren't included in membership.

detailed exception generated is:

system.directoryservices.directoryservicescomexception unhandled  hresult=-2147016657  message=a constraint violation occurred.    source=system.directoryservices  errorcode=-2147016657  extendederror=8373  extendederrormessage=000020b5: atrerr: dsid-03152804, #1:  0: 000020b5: dsid-03152804, problem 1005 (constraint_att_type), data 0, att 1f (member)  stacktrace:  @ system.directoryservices.directoryentry.commitchanges()  @ hci.directoryservices.adlds.role.save() in c:\projects\et\shared\hci.directoryservices\adlds\role.cs:line 186  @ hci.test.admanager.passwordmodifier.main() in c:\projects\et\admanager\hci.test.admanager\program.cs:line 303  @ system.appdomain._nexecuteassembly(runtimeassembly assembly, string[] args)  @ microsoft.visualstudio.hostingprocess.hostproc.runusersassembly()  @ system.threading.executioncontext.runinternal(executioncontext executioncontext, contextcallback callback, object state, boolean preservesyncctx)  @ system.threading.executioncontext.run(executioncontext executioncontext, contextcallback callback, object state, boolean preservesyncctx)  @ system.threading.executioncontext.run(executioncontext executioncontext, contextcallback callback, object state)  @ system.threading.threadhelper.threadstart()



have read online, message indicates there problem member attribute of group, have no idea be. stated, same code works when these specific users excluded. haven't been able find commonality problem users either.

final kicker, if manually add these users container using adsi edit, can want them code: remove, add back, add different container, etc.

advice appreciated.

hello truckstuff,

based on exist articles related issues, saw article:

http://support.microsoft.com/kb/907352

"to work around problem, make sure that  active directory users , computers  snap-in , group policy object editor  snap-in connect same domain controller"

i'm not familiar ad lds please manually check difference between specific users normal users.

another thing may take notice of permission problem, maybe can check directoryservicespermission set permission.

best regards,


barry
trying better understand customer views on social support experience, participation in interview project appreciated if have time. helping make community forums great place.
click here participate survey.



Visual Studio Languages  ,  .NET Framework  >  Visual C#



Comments

Post a Comment

Popular posts from this blog

Azure DocumentDB Owner resource does not exist

having same error microsoft.azure.documents.documentclientexception: message: {"errors":["owner resource not exist"]} , scenario. when deployed webapp azure , try document docdb throws error. docdb exists in azure , contains document looking for. weird local machine(running vs) works fine. i'm using same settings in azure , local. have , idea this. thanks Microsoft Azure  >  Azure Cosmos DB
Read more

job syspolicy_purge_history job fail in sqlserver 2008

Image
hello guys, when installed sqlserver,it automatically created 1 job name job syspolicy_purge_history. but failed @ step 1. the reason is: date                11/6/2010 2:00:00 am log                job history (syspolicy_purge_history) step id                1 server                mxosv-otsdb01 job name                syspolicy_purge_history step name                verify automation enabled. duration                00:00:00 sql severity                16 sql message id                34022 operator emailed                operator net sent                operator paged                retries attempted                0 message executed user: nt authority\system. policy automation turned off. [sqlstate 42000] (error 34022).  the step failed. have run statement: select msdb.dbo.fn_syspolicy_is_automation_enabled the returned valus 0. what can resolve it? or can delete job manually.   thanks in advance. if haven't things want,be
Read more

Trying to register with public marketplace error with 'Get-AzureStackStampInformation'

when trying register against public azure adfs azure stack error below. logs can found at: c:\maslogs\azurestack.azureregistration.2017-10-12.01-31-23.log  and  \\azs-ercs01\c$\maslogs error occurred checking stamp information: system.management.automation.remoteexception: term 'get-azurestackstampinformation' not recognized name of cmdlet, function, script file, or operable program. check spelling of name, or if path included, verify path correct , try again. @ c:\azurestack-tools-master\registration\registerwithazure.psm1:1106 char:5 +     throw "logs can found at: $global:azureregistrationlog  and  \ ... +     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~     + categoryinfo          : operationstopped: (logs can fou... , try again.:string) [], runtimeexception     + fullyqualifiederrorid : logs can found at: c:\maslogs\azurestack.azureregistration.2017-10-12.01-31-23.log  a    nd  \\azs-ercs01\c$\maslogs error occurred chec
Read more