Error Message: 19084: DS_RC_BASE_DN_TOO_DEEP (303163)


The information in this article applies to:

  • Microsoft Metadirectory Services 2.1
  • Microsoft Metadirectory Services 2.2
  • Microsoft Metadirectory Services 2.2 SP1
This article was previously published under Q303163

SYMPTOMS

The following error message is recorded in your Zscript.log file on a management agent:
0018-FAILED TO CONSTRUCT[19084]: CN=Dlists,CN=Recipients,OU=site1,O=org1,OU=Exchange,dc=Microsoft,dc=com

CAUSE

Some management agents (MAs) contain the zcMaAliasThingLevels attribute. This attribute defines the maximum number of relative distinguished name components (RDNs) that the connector space object may contain. This limit enforces the rules that the connected directory has concerning nesting. For example, in some connected directories, groups cannot nest. In this case, an object cannot be more than two levels below its MA in the connector space: The first level below the MA is the group, the second level below the MA is the object itself. In the absence of this attribute, no limitation on the number of RDNs in a connector object is imposed.

If you look in the \Zoomserv\bin\init\at.st file, you notice that the only MAs that have the zcMaAliasThingLevels attribute preconfigured are:
  • NT (2)
  • VINES (3)
  • NETWARE (2)
  • CCMAIL (2)
  • SAMPLE (2)
  • GWAPI (3)
In each of these directories, there are specific rules that limit the degree of nesting that an object may experience. Because the connector space is designed to be an accurate reflection of the structure of the connected directory, the zcMaAliasThingLevels attribute limits the connector space structure in order to comply with the connected directory conditions.

RESOLUTION

If you are using one of the MAs listed in the "Cause" section of this article, and the number of levels is accurate, you need to reconstruct the Distinguished Name (DN) to reduce the levels in the Construction template. However, if you are using the Exchange Lightweight Directory Access Protocol (LDAP) or another MA that is not list above, this attribute is not set correctly and you have to remove it. You can completely remove this attribute by deleting the attribute. Use the following methods to view and/or remove the zcMaAliasThingLevel attribute on an MA:

Viewing the Attribute Setting on the MA

  1. In Compass, log on to Microsoft Metadirectory Services (MMS) as the administrator.
  2. Right-click Management Agent, and then click View.
  3. Click All Attributes.
  4. Search for the zcMaAliasThingLevel attribute.

Using LDP to Remove the zcMaAliasThingLevels Attribute

WARNING: If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Exchange 2000 Server, or both. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.

The following example is based on the following assumptions:
  • The name of the MMS server is:

    MMS Server Name

  • The MMS administrator's logon ID is:

    MMS_application_machine_name@MMS_server_name

  • The MMS administrator's password is:

    admin_password

  • The MMS directory contains the following object:

    DsaName=Server,ou=Applications,ou=test,dc=us,dc=microsoft,dc=com

  1. Run the Ldp.exe utility.
  2. On the Connections menu, click Connect.
  3. In the Server box, type MMS Server Name.
  4. In the Port box, type 389.

    The LDAP port may be set to a different number. Verify this value on the MMS server console screen where both the LDAP and HTTP port numbers are displayed.
  5. On the Connections menu, click Bind.
  6. In the User box, type:

    MMS_application_machine_name@MMS_server_name

  7. In the Password box, type admin_password.
  8. Click to clear the Domain check box.
  9. On the View menu, click Tree
  10. Enter the distinguished name of the DSA object:

    DsaName=Server,ou=Applications,ou=test,dc=us,dc=microsoft,dc=com

  11. Expand the DSA. The MAs have distinguished names beginning with "ma=".
  12. Right-click an existing MA, and then click Modify.
  13. Note that base DN is populated with the correct Management Agent DN.
  14. In the Edit Entry attribute box, type zcMaAliasThingLevels.
  15. Click the Delete option under Operations.
  16. Click the Enter button.
  17. The following text should appear in the Entry List dialog box:

    [delete]zcMaAliasThingLevels:3

  18. Click Run to run it.
Modification Type:MinorLast Reviewed:1/25/2006
Keywords:kberrmsg kbprb KB303163
©2004 Microsoft Corporation. All rights reserved.