| Previous | Next |
| ERROR_DS_DISALLOWED_IN_SYSTEM_CONTAINER | ERROR_DS_DRA_OUT_SCHEDULE_WINDOW |
ERROR_DS_LDAP_SEND_QUEUE_FULL
The connection has reached server-side output backpressure
ERROR_DS_LDAP_SEND_QUEUE_FULL means the domain controller’s network send queue for this LDAP connection filled because the client was not reading responses fast enough. The server stops accepting more requests on the connection until output drains and can disconnect a client that remains behind. This is a flow-control failure, not proof that the directory lacks query capacity globally.
Measure the client’s receive loop, result parsing, logging, and downstream processing separately. Avoid issuing many asynchronous searches on one connection unless results are drained continuously. Reduce result volume with selective attributes, indexed filters, size limits, and supported paging, but remember that paging does not help if each page is processed synchronously while the client continues submitting requests. Packet capture and per-request message IDs can reveal whether the application stopped reading, blocked on another resource, or generated an unbounded result set.
Backpressure evidence
- Outstanding LDAP message IDs on the connection.
- Rate of bytes received and application processing time.
- Filter, scope, requested attributes, and result count.
- Thread or event-loop state while the queue filled.
References
- Microsoft: ERROR_DS_LDAP_SEND_QUEUE_FULL definition
- IETF RFC 4511: asynchronous LDAP message correlation
- MS-ADTS: Active Directory search-filter behavior
Looking for a different code? Search another status or error code.