Active Directory Management Agent Discovers Duplicate OIDs When It Discovers a Windows Server 2003 Forest (308039)

SYMPTOMS

When you run an Active Directory Management Agent that is configured to discover a Microsoft Windows Server 2003 (Beta) forest, it may discover duplicate OIDs when it is discovering the Windows Server 2003 schema. The duplicate OIDs will affect both the Secretary and LabeledURI attributes in the schema of Microsoft Metadirectory Services (MMS). The following attributes may be seen in the MMS schema after the AD discovery:

ZAN=DUP-labeledURI-d4c2dee0-2ac2-4957-9acc-8811934ba683,ZAN=AD,ZAN=ms,F=Attributes,DsaName=bclabsrv,ou=Applications,dc=microsoft,dc=com

ZAN=DUP-secretary-106ea060-fb8b-4bf5-81c2-0c979109680d,ZAN=AD,ZAN=ms,F=Attributes,DsaName=bclabsrv,ou=Applications,dc=microsoft,dc=com

In addition, when you run Zoomserv\Bin\Chkoids.exe after the Active Directory Management Agent finishes the schema discovery, you may receive the following report of a duplicate OID:

*************************************
* NON UNIQUE OIDS IN MMS
*************************************

0.9.2342.19200300.100.1.21
DN 1:
ZAN=DUP-secretary-106ea060-fb8b-4bf5-81c2-0c979109680d,ZAN=AD,ZAN=ms,F=Attributes,DsaName=bclabsrv,ou=Applications,dc=microsoft,dc=com
DN 2:
ZAN=secretary,ZAN=COSINE,F=Attributes,DsaName=bclabsrv,ou=Applications,dc=microsoft,dc=com

1.3.6.1.4.1.250.1.57
DN 1:
ZAN=url,ZAN=WEB,F=Attributes,DsaName=bclabsrv,ou=Applications,dc=microsoft,dc=com
DN 2:
ZAN=DUP-labeledURI-d4c2dee0-2ac2-4957-9acc-8811934ba683,ZAN=AD,ZAN=ms,F=Attributes,DsaName=bclabsrv,ou=Applications,dc=microsoft,dc=com

CAUSE

This problem can occur because after you upgrade a Microsoft Windows 2000-based computer with Microsoft Exchange 2000 installed to Windows Server 2003 (Beta), the Exchange 2000 schema replication causes duplicate OIDS in the Active Directory schema. When the schema is discovered by MMS, the duplicate attribute is also imported, and it has the same OID. The Active Directory Management Agent schema import process uses the attribute name to identify uniqueness in MMS but the duplicate OID attributes have different names because Windows Server 2003 prepends DUP and a CLSID to the original attribute. When you view this attribute, it looks new and does not exist in the MMS schema, and an import creates a new attribute but does not enforce OID uniqueness.

RESOLUTION

NOTE: The following fix filters out the duplicate attributes in the Active Directory schema by not importing attributes that have the "Dup" prefix on the attribute name. This filtering is logged in the Adma.log in the form of an error to inform the administrator that a duplicate attribute was found. See the "More Information" section of this article for an example of the error.

A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Only apply it to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next version of Microsoft Metadirectory Services that contains this hotfix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

NOTE: In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The typical support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

The English version of this fix should have the following file attributes or later:

   Date         Time   Version      Size       File name
   ----------------------------------------------------------
   26-Jul-2001  17:53  2.2.1300.3     174,592  Cdir_ad.dll
   11-Sep-2001  13:41  2.2.1300.7   1,013,760  Cdir_ln.exe
   02-Aug-2001  15:39  2.2.1300.4     960,000  Importt.exe
   11-Sep-2001  14:55  2.2.1300.8   1,262,592  Viaserver.exe
   20-Sep-2001  15:41  2.2.1300.10     26,624  Ldapschema.dll
   01-Aug-2001  14:17                     834  Updoid.bat
   25-Jul-2001  14:08                 166,356  Db5attr.oid

MORE INFORMATION

After you apply this fix to MMS, error entries that are similar to the following error entries are added to the Adma.log:

DBG_01 03c8 01/11/07 11:41:51.681 Importing schema...
ERR_00 03c8 01/11/07 11:42:02.181 (LdapSchema_parseAttributeTypesIntoVia)
The schema object
'ZAN=DUP-secretary-106ea060-fb8b-4bf5-81c2-0c97910968
0d,ZAN=AD,ZAN=ms,F=Attributes,DsaName=bclabsrv,ou=Applications,dc= microsoft,dc=com' represents a duplicate OID entry and will not be imported. Please cleanup the Ad schema
ERR_00 03c8 01/11/07 11:42:12.603 (LdapSchema_parseAttributeTypesIntoVia)
The schema object
'ZAN=DUP-labeledURI-d4c2dee0-2ac2-4957-9acc-8811934ba
683,ZAN=AD,ZAN=ms,F=Attributes,DsaName=bclabsrv,ou=Applications, dc=microsoft,dc=com' represents a duplicate OID entry and will not be imported. Please cleanup the Ad schema

For additional information, click the article number below to view the article in the Microsoft Knowledge Base: