Thanks for clarification.
There was not any object DN's, the Description field  is just a text about not 
found root references and that's all. we dont have any external directories.
I think the only application, which uses directory intensively is Exchange2000, 
but it seems to work fine too. The most important thing to me is that 
everything won't get worse, so one day AD won't stop working because of this, 
or Exchange.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Brett Shirley
Sent: Sunday, January 02, 2005 4:33 PM
To: [email protected]
Subject: RE: [ActiveDir] help troubleshoot ntds general 1049 error


Not really.

It is OK to not generate a superior reference.  Superior references are
really for people who have a advanced directory setups, and intentionally
want unknown LDAP DNs to be referred to another directory service (i.e.
another AD forest, or Novel NDS, or Sun iPlanet / SunONE servers).

But this means that there is some application that is generating a garbage
DN, in that it is asking your directory for a DN base that isn't rooted in
any of your domains/config/schema NCs.

What is the object DN in the event?  Can you use that to guess at the
errant app hitting your directory?

Cheers,
Brett Shirley [msft]

This posting is provided "AS IS" with no warranties, and confers no
rights.


On Sun, 2 Jan 2005, Pete Procenko wrote:

> I see, I found some references about superiorDNSRoot at the MS's site, could 
> You please recommend what to look for in AD to see where the trouble is? As 
> far as I understood superiorDNSRoot is something dynamically generated, but 
> in my case sometimes this generation fail, am I right? 
> 
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to