Active Directory: problem 1001 (NO_ATTRIBUTE_OR_VAL)

[Prentice Bisbal]

I have another Active Directory related question.

When I updated a password in AD as an AD aministrator, I get this error:


00002085: AtrErr: DSID-031906A5, #1:
    0: 00002085: DSID-031906A5, problem 1001 (NO_ATTRIBUTE_OR_VAL), data
0, Att 9005a (unicodePwd):len 20
 at sns_passwd.pl line 214.


Here's the section of code that produces this error, with line numbers:

211 if ($username ne getlogin()) {
212     $mesg = $ad->modify($ad_user_dn, replace=>{unicodePwd =>
$newUnicodePwd} );
213 } else {
214     $mesg = $ad->modify($ad_user_dn, delete=>{unicodePwd =>
$newUnicodePwd});
215     $code = $mesg->code;
216     if ($code != 0) {
217         $mesg = $ad->modify($ad_user_dn, replace=>{unicodePwd =>
$newUnicodePwd} );
218     }
219 }

I understand why I'm seeing this error. I'm doing a delete-and-replace
as the admin, and I guess the requires a UnicodePwd attribute for the
user account, so it's complaining that i broke the rules.

The code still seems to work - my password is updated in Active
Directory. I never saw this before, so I suspect this error could be a
result of  relatively recent upgrade of our domain controllers to
Windows Server 2008 R2 (no idea what they were earlier). Can anyone
confirm this? Also, does anyone know how to prevent this error or get
rid of it? This is a script that will be used by end-users to change
their own passwords, and I prefer they don't see this message and think
something went wrong.

-- 
Prentice