pciccare
asked on
Forestprep fails during AD update on Windows 2000 to Windows 2003. Problem with x500uniqueidentifier in sch18.ldf.
How do I get around this adprep /forestprep error where forestprep fails when updating sch18.df on line 275. See error log output:
Entry DN: CN=x500uniqueIdentifier,CN
Add error on line 275: Unwilling To Perform
The server side error is "Schema update failed in recalculating validation cache."
An error has occurred in the program
I have run dcdiag and netdiag and all is fine. I have also checked AD using ASDI and found no damaged LDAP entries for Exchange 2000. I'm running Windows 2000 sp4 and Exchange 2000 with sp3.
Entry DN: CN=x500uniqueIdentifier,CN
Add error on line 275: Unwilling To Perform
The server side error is "Schema update failed in recalculating validation cache."
An error has occurred in the program
I have run dcdiag and netdiag and all is fine. I have also checked AD using ASDI and found no damaged LDAP entries for Exchange 2000. I'm running Windows 2000 sp4 and Exchange 2000 with sp3.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I've found the problematic entry:
CN=osxid,CN=Schema,CN=Conf
Now, I'm trying to delete the entry and I'm getting the error message:
Error: Delete: Insufficient Rights. <50>
currently researching.
CN=osxid,CN=Schema,CN=Conf
Now, I'm trying to delete the entry and I'm getting the error message:
Error: Delete: Insufficient Rights. <50>
currently researching.
ASKER
I finally resolved the issue by renaming the osxuid object. The recommendations in the list didn't work. LDIFDE would still fail. I used ldp.exe to get to the object and from Browse, selected modifyrdn which allowed me to rename the CN attribute from osxuid to x500uniqueIdentifier. The changed correctly mapped the attributeID field of 2.5.4.45 to x500uniqueIdentifier which made it compatible with windows 2003 schema. Running addprep /forestprep after this changed worked flawlessly.
Hi
Sorry - I went to bed! (Different time-zone I think - UK). I posted the link somewhat hurriedly as it looked as though there had been a schema mod that would stop the prep from executing completely - but as I can see you took it from there and sorted it out very well! Glad I helped get you in the right direction anyway,
Best wishes
Deb :))
Sorry - I went to bed! (Different time-zone I think - UK). I posted the link somewhat hurriedly as it looked as though there had been a schema mod that would stop the prep from executing completely - but as I can see you took it from there and sorted it out very well! Glad I helped get you in the right direction anyway,
Best wishes
Deb :))
ASKER
Thanks for the quick response. I've followed the steps and the command works but it does not find any uniqeid attributes. I'ved followed the notes from google groups but I'm unable to find any apple entries in Active Directory. I do recall that I attempted to integrate Active Directory with a Jaguar server and it never worked so we gave up on the integration.
I have two DC's.
Any other thoughts are directions would be greatly appreciated.
Patrick