question

MarkGoodall-7412 avatar image
0 Votes"
MarkGoodall-7412 asked GaryNebbett edited

What does this DSID LdapErr: DSID-0C090AFF error code mean

I have an LDAP integration failing with the LDAP error code

LdapErr: DSID-0C090AFF

But when searching the net seems like this DSID reference has never been posted before

Does anyone know what this DSID reference code stand for ?

Thanks

windows-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GaryReynolds-8098 avatar image
0 Votes"
GaryReynolds-8098 answered GaryReynolds-8098 commented

Hi Mark,

I don't have any additional information on the meaning of the DSID error code but this error text is normally part of the extended error message returned by the LDAP client. With the MS LDAP client there is normally additional text after the DSID error text that provides more information, as shown below:

  Server Error: 0000216B: AtrErr: DSID-03140561, #1:
     0: 0000216B: DSID-03140561, problem 1004 (WRONG_MATCH_OPER), data 0, Att 90515 (tokenGroups)
 , Ext Error: (8555) A Filter was passed that uses constructed attributes.

If you are using the MS LDAP client, call the LdapGetLastError function which will return the short error code, which is searchable. For the above example the short error code is:

 Error: (0x12) There was an inappropriate matching

I hope that helps.

Gary.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.


You can use the following functions to get the extended error details:

 ldap_get_option(hLDAP,LDAP_OPT_SERVER_ERROR,(void*)&pServerError);
        
 ldap_get_option(hLDAP,LDAP_OPT_SERVER_EXT_ERROR,(void*)&dwServerError);

LDAP_OPT_SERVER_ERROR will return the full error text, and LDAP_OPT_SERVER_EXT_ERROR will return the corresponding Windows error code.

Gary.

0 Votes 0 ·
LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hello,

Microsoft makes a program named err.exe that you can download and use to look up error codes. More officially named the Microsoft Error Lookup Tool:

https://www.microsoft.com/en-us/download/details.aspx?id=100432

Use the Error Code Lookup tool to determine error values from decimal and hexadecimal error codes in Microsoft Windows® operating systems. The tool can look up one or more values at a time. All values on the command line will be looked up and presented to you. If available, informational data associated with the value or values will also be shown.

It provides error codes for Windows, SQL, Exchange, etc.



--If the reply is helpful, please Upvote and Accept as answer--

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GaryNebbett avatar image
0 Votes"
GaryNebbett answered GaryNebbett edited

Hello @MarkGoodall-7412,

I believe that DSID-0C090AFF encodes the directory, file and line number of the source code file where the error was detected. The information is mostly of use to someone with source code access.

If you are familiar with debuggers, disassembly, etc. then you could search the LDAP server binary for that number and disassemble the code near it until a call to DoSetLdapError is encountered.

Your binary is different from mine (so I don't have an error reported on line 0xAFF of file 9 in directory 12), but here is an example with DSID-0C090A90:

 ntdsai!LDAP_CONN::SearchRequest+0x845:
 00000001`80087ee1 488b4c2478      mov     rcx,qword ptr [rsp+78h]
 00000001`80087ee6 48894c2428      mov     qword ptr [rsp+28h],rcx
 00000001`80087eeb c7442420900a090c mov     dword ptr [rsp+20h],0C090A90h
 00000001`80087ef3 ba8f200000      mov     edx,208Fh
 00000001`80087ef8 41b805000000    mov     r8d,5
 00000001`80087efe 8bc8            mov     ecx,eax
 00000001`80087f00 eb20            jmp     ntdsai!LDAP_CONN::SearchRequest+0x886 (00000001`80087f22)
    
 ntdsai!LDAP_CONN::SearchRequest+0x886:
 00000001`80087f22 4533c9          xor     r9d,r9d
 00000001`80087f25 e8d2dafcff      call    ntdsai!DoSetLdapError (00000001`800559fc)

Gary

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.