Question

An error occurred in the LDAP operation '[LDAP: error code 66

  • 1 June 2022
  • 2 replies
  • 16 views

Badge +3

Using A360 Cloud and the Active Directory - Delete computer action, I have made conection to AD and passing a valid computer name to the action I get the following error:

 

An error occurred in the LDAP operation '[LDAP: error code 66 - 00002015: UpdErr: DSID-031A1213, problem 6003 (CANT_ON_NON_LEAF), data 0

]'.

 

 

 

Any ideas?


2 replies

@Andrew Faulds​ : Based on the error code 66 of LDAP when there is a root above the computer / user you can't delete it . reference below

 

notAllowedOnNonLeaf (66)

Applicable operation types: delete, modify DN

The notAllowedOnNonLeaf result code indicates that the requested operation is only supported for leaf entries, but the targeted entry has one or more subordinates.

For a delete request, this indicates that the targeted entry has one or more subordinate entries. Under normal circumstances, a delete request is only allowed to remove leaf entries, although some servers may provide support for a control (like the one described in draft-armijo-ldap-treedelete) that allow removing an entry and all of its subordinates in a single request.

For a modify DN request, this indicates that the targeted entry has one or more subordinate entries and that the server does not support moving or renaming entries with subordinates. Some servers do support this capability, but others do not.

Badge +3

@Venkata Kancharla​ 

 

Thanks for the post. Already had done a quick google on the error as I assumed it was an LDAP one. The question I have, is how do I work around this using the AA Delete computer action, or am I going to have to write a vbs to perform the deletion?

Reply