| Previous | Next |
| ERROR_DS_SHUTTING_DOWN | ERROR_DS_INVALID_ROLE_OWNER |
ERROR_DS_UNKNOWN_OPERATION
The server does not recognize the requested directory operation
LDAP has a defined set of protocol operations and an extension model for controls and extended operations. Active Directory additionally exposes proprietary controls with specific operation pairing rules. A malformed operation choice, unsupported internal request, or control used with the wrong LDAP operation can reach directory code that cannot dispatch the request as intended.
Capture the LDAP message type, controls, OIDs, criticality flags, and API function used by the client. Do not reduce the trace to the target DN. If a critical control is unknown, LDAP has explicit unavailableCriticalExtension semantics; this Windows status can also appear through directory APIs above the raw protocol, so compare the high-level API with the wire request.
What to inspect
- Record protocol operation and every control or extended-operation OID.
- Verify each control is documented for the selected LDAP operation.
- Compare client library behavior before and after upgrades or feature negotiation changes.
References
- IETF RFC 4511: LDAP protocol operations and result semantics
- MS-ADTS: LDAP extended controls supported by Active Directory
- MS-ADTS: constraints on Active Directory Modify operations
Looking for a different code? Search another status or error code.