| Previous | Next |
| ERROR_DS_NAME_TOO_MANY_PARTS | ERROR_DS_NAME_VALUE_TOO_LONG |
ERROR_DS_NAME_TOO_LONG
The complete directory name is too long
This status concerns the overall name, which is different from an individual RDN attribute value being too long. A DN can be syntactically correct and contain legal components yet still become excessive after deeply nested organizational units, generated CN values, or repeated suffix construction. Escaping can also change the textual representation used by a client.
Measure the value at the directory API boundary and parse it into components. Determine whether depth or one large component dominates the name. Shortening an unrelated displayName will not change the DN. If the application generates hierarchy from external paths, ensure it is not embedding a full source path in every RDN level.
What to inspect
- Record the original Unicode DN before URL, JSON, or shell escaping.
- Compare total DN size with the sizes of individual RDN values.
- Review hierarchy generation for duplicated or unnecessarily deep containers.
References
- IETF RFC 4514: string representation of LDAP distinguished names
- IETF RFC 4512: LDAP directory model, aliases, DNs, and schema
- MS-ADTS: constraints on Active Directory Add operations
Looking for a different code? Search another status or error code.