| Previous | Next |
| ERROR_DS_OBJECT_CLASS_REQUIRED | ERROR_DS_ATT_NOT_DEF_FOR_CLASS |
ERROR_DS_MISSING_REQUIRED_ATT
A mandatory schema attribute is absent
A class can require attributes through mustContain, systemMustContain, and inherited class definitions. Active Directory validates the effective class hierarchy when an object is created or changed. This result means at least one attribute that must be present for that class set is absent from the resulting entry.
Do not compare only the directly selected class with the request. Mandatory attributes can come from superclasses, and auxiliary classes can add additional schema requirements. The useful diagnostic is the resulting object model: enumerate the class hierarchy, identify mandatory attributes, and compare them with the full Add or Modify request after any server-side behavior is considered.
What to inspect
- Resolve all effective
objectClassvalues and inherited mandatory attributes. - Check
mustContainandsystemMustContainon the class definitions. - Supply the actual required value; adding arbitrary optional attributes will not satisfy the schema.
References
- MS-ADTS: schema consistency checks
- Microsoft: systemMustContain attribute
- IETF RFC 4512: LDAP directory models and schema
Looking for a different code? Search another status or error code.