MMS Exported LDIF Files Do Not Work When They Are Imported Into Active Directory (312162)



The information in this article applies to:

  • Microsoft Metadirectory Services 2.1
  • Microsoft Metadirectory Services 2.2
  • Microsoft Metadirectory Services 2.2 SP1

This article was previously published under Q312162

SYMPTOMS

If you are using Ldifde files that are exported from Microsoft Metadirectory Services (MMS) on Microsoft Windows 2000 Advanced Server to import changes into Active Directory and you are trying to clear attributes, the import files do not work. For example:

dn: CN=testuser,CN=Users,DC=testlab,DC=dan
changetype: modify
replace: givenName
givenName:
-

If you omit the "givenName:" line, the file is imported correctly.

CAUSE

The specified update type writes the attribute with a value that has a length of 0 (zero). There is no clear specification that defines how 0-length attributes should be handled in Lightweight Directory Access Protocol (LDAP). Some popular LDAP directories do accept imports such as this.

After you install this hotfix, MMS uses the delete syntax to remove attributes.

RESOLUTION

A supported fix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Apply it only to computers that are experiencing this specific problem. This fix may receive additional testing. Therefore, if you are not severely affected by this problem, Microsoft recommends that you wait for the next version of Microsoft Metadirectory Services that contains this hotfix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:NOTE: In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The typical support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

The English version of this fix should have the following file attributes or later:
   Date         Time    Size    File name
   ----------------------------------------
   21-Jan-2002  17:06   97,280  Q312162.exe

The hotfix has the following requirements:
  • The MMS server must run the released version of the XML Wizard (this is included with MMS 2.2 SP1) before you install the fix.
  • You must run Microsoft Windows Installer 2.0 before you install the fix. Windows Installer 2.0 is available from the following Microsoft Web site:
  • Microsoft recommends that the Windows 2000-based Active Directory server on which you import the LDAP Data Interchange Format (LDIF) files be running Windows 2000 Service Pack 2 (SP2) or later.

WORKAROUND

You can change the import file manually, but for scripted imports, changing the syntax is not a practical solution.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

The new behavior uses delete directives to import attribute removals, but there may be problems with delete type updates.

According to the LDIF specification, the "replace" method of attribute deletion should always succeed; the explicit "delete" method generates an error if the attribute does not exist. This behavior has the potential to cause errors if the attribute that MMS is attempting to delete has been deleted by a source other than MMS (for example, by an administrator).

If an LDIF file contains "delete:" directives, replaced them with "replace:" directives.

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

320718 Microsoft Metadirectory Services 2.2 Post SP1 Hotfix List


Modification Type:MajorLast Reviewed:6/27/2006
Keywords:kbHotfixServer kbQFE kbbug kbfix kbQFE kbWin2000PreSP3Fix KB312162