Re: ADAM Schema Problem

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi

lifting the constraint as Dmitri indicates is what you could try for
testing.
You want
Allow passwd op on unsecured connection

in the ds behavior sub-menu of dsmgmt.exe.

Lee Flight

"Norm" <Norm@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:AD5AC0DB-8345-4F51-89CE-5D5052B0E707@xxxxxxxxxxxxxxxx
I have RequireSecureProxyBind=0, RequireSecureSimpleBind=0 and
ADAMDisablePasswordPolicies=1
set but am still getting the error. Tried it on another server as well.
Should I use SystemAuxiliaryClass: msDS-BindableObject
or just AuxiliaryClass: msDS-BindableObject in my schema? Do I also need
securityPrincipal as an aux class? Do I perhaps need
to set a default security principal as well?

Thanks, Norm.



"Dmitri Gavrilov [MSFT]" wrote:

8237 == ERROR_DS_CONFIDENTIALITY_REQUIRED "This request requires a secure
connection."

By default, password operations can only be performed on an encrypted
connection (SSL or LDAP+LDAP_OPT_ENCRYPT=1).
This constraint can be disabled if you wish -- look in adam.chm.

--
Dmitri Gavrilov
SDE, DS Admin eXperience

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Norm" <Norm@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9F60C916-B9E7-4AB9-999C-F0A9DD683E18@xxxxxxxxxxxxxxxx
I added systemAuxiliaryClass: msDS-BindableObject to the object and
built a
new instance.
Checked the objectClass and all looked good. Now I get the following
error:

Add error on line 1: Operations Error
The server side error is: 0x2077 Illegal modify operation. Some aspect
of
the modification is not permitted.
The extended server error is:
00002077: SvcErr: DSID-03380788, problem 5012 (DIR_ERROR), data 8237

Here is the object I'm trying to add. If I leave off the userPassword
attribute it works fine.

dn: ctCalXItemId=09993:00001,ou=Library,ou=Administration,o=Maricopa
Community
College District,c=us
objectClass: top
objectClass: ctCalAdmin
sn: SYSOP
cn: ctCalXItemId=09993:00001
ctCalHost: Y1EFBB6RDI6UF5P
ctCalXItemId: 09993:00001
userPassword: Nothing99

Thanks, Norm.

"Lee Flight" wrote:

Hi

yes msDS-bindableObject needs to be added when the classSchema
object is created. Starting from scratch is cleanest before going into
production, however there are some notes on defuncting schema objects
here:

http://groups.google.co.uk/group/microsoft.public.windows.server.active_directory/browse_frm/thread/149af862562abf17/354fccd89d32d6ed



Lee Flight








.