| Previous | Next |
| ERROR_DS_NAME_TOO_LONG | ERROR_DS_NAME_UNPARSEABLE |
ERROR_DS_NAME_VALUE_TOO_LONG
One naming value is too long even if the DN structure is valid
This code points to a value inside a directory name rather than the complete DN. An RDN contains one or more attribute-value assertions, and the naming attribute is also governed by schema syntax and range constraints. A shallow DN can therefore fail because a single CN, OU, or other naming value is excessive.
Parse the leaf and parent RDNs and identify the exact naming attribute and decoded value. Measure the semantic value, not merely the escaped RFC 4514 text. If the name is generated from a file name, certificate subject, URL, or external identifier, store the long source value in an ordinary attribute and use a bounded naming key when the directory schema permits it.
What to inspect
- Identify the specific RDN attribute-value assertion that exceeds the limit.
- Inspect rangeUpper and syntax for the naming attribute.
- Do not confuse escaped DN string length with the underlying attribute value length.
References
- IETF RFC 4514: string representation of LDAP distinguished names
- MS-ADTS: constraints on Active Directory Add operations
- IETF RFC 4512: LDAP directory model, aliases, DNs, and schema
Looking for a different code? Search another status or error code.