| Previous | Next |
| ERROR_DS_NAME_ERROR_NO_SYNTACTICAL_MAPPING | ERROR_DS_WRONG_OM_OBJ_CLASS |
ERROR_DS_CONSTRUCTED_ATT_MOD
Constructed attributes are calculated by the directory service
ERROR_DS_CONSTRUCTED_ATT_MOD occurs when a client tries to write an attribute whose value Active Directory computes. Constructed attributes include attributes marked with ATTR_IS_CONSTRUCTED, rootDSE attributes, and back links. Their values can depend on other attributes or other objects, so they are not ordinary persisted fields even when they appear in LDAP search results.
Identify the attribute’s attributeSchema object and inspect systemFlags and linkID. For a back link such as a reverse membership relationship, modify the corresponding forward link instead. For other computed values, change the documented source state or use the API that owns the calculation. Removing the attribute from the modify list is not enough if middleware later re-adds every property it previously read; serializers should distinguish writable schema attributes from computed response fields.
How to find the writable source
- Attribute lDAPDisplayName and systemFlags.
- Whether it is a back link or rootDSE attribute.
- Forward-link or source attributes used in computation.
- Client layer that generated the LDAP Modify list.
References
- MS-ADTS: definition of constructed attributes
- Microsoft: modify the forward link, not the back link
- Microsoft: attribute characteristics and systemFlags
Looking for a different code? Search another status or error code.