| Previous | Next |
| ERROR_DS_CANT_RETRIEVE_DN | ERROR_DS_CANT_RETRIEVE_INSTANCE |
ERROR_DS_MISSING_SUPREF
Referrals depend on naming-context topology stored in configuration data
ERROR_DS_MISSING_SUPREF means the directory service cannot issue the referral needed for a name outside the naming contexts it can resolve. Active Directory represents forest partitions and their relationships with crossRef objects in the configuration partition; external referral targets additionally require usable naming and DNS-root information.
Identify the requested DN and the naming context that should be its superior, then inspect the partitions container and referral configuration on the contacted domain controller. Confirm that the relevant crossRef is present, enabled, and replicated, and that the target server name can be located. Do not treat referral chasing as a repair for missing topology data: a client can follow only a referral that the server can construct. Compare behavior across replicas to distinguish a forest configuration problem from delayed or failed configuration-partition replication.
Referral topology to verify
- Requested DN and nearest known naming context.
- Relevant crossRef object and DNS root.
- Configuration-partition replication status.
- Referral-chasing settings on the client.
References
- Microsoft: crossRef objects and AD DS referrals
- MS-ADTS: LDAP referral response behavior
- IETF RFC 4511: referral and continuation references
Looking for a different code? Search another status or error code.