"Through the use of a network trace, one can develop a better understanding of why an LDAP request did not perform as expected. By looking at the response packet to the query in question, one may gather additional data. For example, the following code shows the response from an LDAP Bind operation when incorrect credentials were passed to the DSA.
LDAP: ProtocolOp: BindResponse (1)
LDAP: MessageID
LDAP: ProtocolOp = BindResponse
LDAP: Result Code = Invalid Credentials LDAP: Matched DN =
LDAP: Error Message = 8009030C: LdapErr: DSID-0C090341, comment: AcceptSecurityContext error, data 52e, v7bl.
The Result Code returned an LDAP error that translated to Invalid Credentials. The LDAP error codes may be found in a file called Winldap.h, which is a part of the Platform SDK. Additional information can be found by further drilling into the packet’s data section when the DSA is a Microsoft Active Directory server. The error message returns the Win32 error code from the DSA. In this case 8009030C is returned which resolves to SEC_E_LOGON_DENIED. The DSID number is an ID that helps Microsoft Product Support Services debug the line of code from which the error was returned, if needed."
I've tried to find these error codes in Winldap.h, but have not been successful. Maybe somebody else can enlighten us on how to read these error codes.
Dave
-----Original Message-----
From: Guoben Li [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 16, 2002 11:17 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Error MessageHi, Tony and Dave,Thank you very much for your help. Each of you pointed out one problem of mine:1. Anonymous access is restricted so I changed to authenticated user bind;2. There is an error in my search base. For that particular AD the DC=windev instead of DC=win.I am still wondering how come there is no place to find what error code 0000202B: RefErr: DSID-031006A4, ... means? Is there any AD error code manual from Microsoft?Guoben Li
