Hi Chris, thank you for your reply
>> failed to add entry: 00000057: LdapErr: DSID-0C090A85, comment: >> Error in >> attribute conversion operation, data 0, vece^@ at zzlib-html.pl line >> 445, >> <DATA> line 228. > > What's the value of $entry->code when the modify fails? The value of > $entry->error is unstructured text that servers /may/ send back, but > isn't guaranteed to contain anything useful. > > I also note you aren't getting the result for *each* modify operation, > you're just showing the result of the last one. If you move your test > against $entry->code inside each loop you should find exactly which > change is causing the problem. I did, the message is the same and just one (one delete). >> the ^@ is not ascii but seems to by some control character. > > Are you certain there are no strange keys in %add and %del? > >> $tmp by the way is not 0 but: >> CN=XXX-NEWS-XXX,OU=XXX-XXX,OU=DXXX,OU=XXXXX,DC=XXX,DC=XXX,DC=de >> and also $username is not empty either. Yes, it is the above string. To add this is working >> or could it be that the error occures if "members" would be empty? > > LDAPv3 will delete the whole attribute if you delete all its values, > but maybe your server vendor didn't read that bit of the spec. The > actual error code will give more of a precise indication what the > server thinks the problem is. Well, it's Active Directory ... And as I am in a test environmen, there is just one value in the atribut, I want to delete it and it is a special service account with limited rights, I think this may be the problem. > > Cheers, > > Chris > Thanks, anniyka
