Junky's IT Notebook

          統(tǒng)計(jì)

          留言簿(8)

          積分與排名

          WebSphere Studio

          閱讀排行榜

          評(píng)論排行榜

          Microsoft LDAP 錯(cuò)誤代碼

          http://support.microsoft.com/kb/218185/

          Microsoft Windows 2000 Active Directory 使用 Internet 標(biāo)準(zhǔn)的輕量級(jí)目錄訪問(wèn)協(xié)議 (LDAP) 來(lái)訪問(wèn)信息。在響應(yīng)各種 LDAP 請(qǐng)求時(shí),域控制器會(huì)返回包含域 LDAP 錯(cuò)誤代碼的響應(yīng),這些錯(cuò)誤代碼指示協(xié)議操作的狀態(tài)。本文將介紹這些錯(cuò)誤代碼。


          下表描述了這些錯(cuò)誤代碼。
               代碼                               值      說(shuō)明
          ---------------------------------------------------------------------------
          LDAP_SUCCESS                      0x00   請(qǐng)求成功。
          LDAP_OPERATIONS_ERROR             0x01   LDAP 庫(kù)初始化失敗。
          LDAP_PROTOCOL_ERROR               0x02   出現(xiàn)協(xié)議錯(cuò)誤。
          LDAP_TIMELIMIT_EXCEEDED           0x03   超出時(shí)間限制。
          LDAP_SIZELIMIT_EXCEEDED           0x04   超出大小限制。
          LDAP_COMPARE_FALSE                0x05   比較結(jié)果為 FALSE。
          LDAP_COMPARE_TRUE                 0x06   比較結(jié)果為 TRUE。
          LDAP_AUTH_METHOD_NOT_SUPPORTED    0x07   不支持此身份驗(yàn)證方法。
          LDAP_STRONG_AUTH_REQUIRED         0x08   需要加強(qiáng)的身份驗(yàn)證。
          LDAP_REFERRAL_V2                  0x09   LDAP 版本 2 檢索。
          LDAP_PARTIAL_RESULTS              0x09   接收到部分結(jié)果和檢索。
          LDAP_REFERRAL                     0x0a   出現(xiàn)檢索。
          LDAP_ADMIN_LIMIT_EXCEEDED         0x0b   超出服務(wù)器上的管理限制。
          LDAP_UNAVAILABLE_CRIT_EXTENSION   0x0c   沒(méi)有精密擴(kuò)展。
          LDAP_CONFIDENTIALITY_REQUIRED     0x0d   需要保密。
          LDAP_NO_SUCH_ATTRIBUTE            0x10   請(qǐng)求的屬性不存在。
          LDAP_UNDEFINED_TYPE               0x11   類型未定義。
          LDAP_INAPPROPRIATE_MATCHING       0x12   出現(xiàn)不適當(dāng)?shù)钠ヅ洹?
          LDAP_CONSTRAINT_VIOLATION         0x13   出現(xiàn)約束沖突。
          LDAP_ATTRIBUTE_OR_VALUE_EXISTS    0x14   屬性已存在或已被賦值。
          LDAP_INVALID_SYNTAX               0x15   語(yǔ)法無(wú)效。
          LDAP_NO_SUCH_OBJECT               0x20   對(duì)象不存在。
          ld_matched 在LDAP_NO_SUCH_OBJECT
          錯(cuò)誤返回事件中,這個(gè)參數(shù)包含DN匹配的程度; LDAP_ALIAS_PROBLEM 0x21 別名無(wú)效。 LDAP_INVALID_DN_SYNTAX 0x22 辨別名的語(yǔ)法無(wú)效。 LDAP_IS_LEAF 0x23 該對(duì)象為葉對(duì)象。 LDAP_ALIAS_DEREF_PROBLEM 0x24 無(wú)法取消對(duì)別名的引用。 LDAP_INAPPROPRIATE_AUTH 0x30 身份驗(yàn)證不正確。 LDAP_INVALID_CREDENTIALS 0x31 提供的憑據(jù)無(wú)效。 LDAP_INSUFFICIENT_RIGHTS 0x32 用戶無(wú)足夠的訪問(wèn)權(quán)限。 LDAP_BUSY 0x33 服務(wù)器忙。 LDAP_UNAVAILABLE 0x34 服務(wù)器不可用。 LDAP_UNWILLING_TO_PERFORM 0x35 服務(wù)器不處理目錄請(qǐng)求。 LDAP_LOOP_DETECT 0x36 引用鏈循環(huán)回至引用服務(wù)器。 LDAP_NAMING_VIOLATION 0x40 存在命名沖突。 LDAP_OBJECT_CLASS_VIOLATION 0x41 存在對(duì)象類別沖突。 LDAP_NOT_ALLOWED_ON_NONLEAF 0x42 不允許在非葉對(duì)象上操作。 LDAP_NOT_ALLOWED_ON_RDN 0x43 不允許在 RDN 上操作。 LDAP_ALREADY_EXISTS 0x44 對(duì)象已存在。 LDAP_NO_OBJECT_CLASS_MODS 0x45 無(wú)法修改對(duì)象類別。 LDAP_RESULTS_TOO_LARGE 0x46 返回的結(jié)果太大。 LDAP_AFFECTS_MULTIPLE_DSAS 0x47 多個(gè)目錄服務(wù)代理受到影響。 LDAP_OTHER 0x50 出現(xiàn)未知錯(cuò)誤。 LDAP_SERVER_DOWN 0x51 無(wú)法聯(lián)系 LDAP 服務(wù)器。 LDAP_LOCAL_ERROR 0x52 出現(xiàn)本地錯(cuò)誤。 LDAP_ENCODING_ERROR 0x53 出現(xiàn)編碼錯(cuò)誤。 LDAP_DECODING_ERROR 0x54 出現(xiàn)解碼錯(cuò)誤。 LDAP_TIMEOUT 0x55 搜索超時(shí)。 LDAP_AUTH_UNKNOWN 0x56 出現(xiàn)未知的身份驗(yàn)證錯(cuò)誤。 LDAP_FILTER_ERROR 0x57 搜索篩選器不正確。 LDAP_USER_CANCELLED 0x58 用戶已取消操作。 LDAP_PARAM_ERROR 0x59 傳遞給例程的參數(shù)不正確。 LDAP_NO_MEMORY 0x5a 系統(tǒng)內(nèi)存不足。 LDAP_CONNECT_ERROR 0x5b 無(wú)法建立到服務(wù)器的連接。 LDAP_NOT_SUPPORTED 0x5c 不支持此功能。 LDAP_CONTROL_NOT_FOUND 0x5d ldap 函數(shù)找不到指定控件。 LDAP_NO_RESULTS_RETURNED 0x5e 不支持此功能。 LDAP_MORE_RESULTS_TO_RETURN 0x5f 將返回其他結(jié)果。 LDAP_CLIENT_LOOP 0x60 檢測(cè)到客戶循環(huán)。 LDAP_REFERRAL_LIMIT_EXCEEDED 0x61 超出檢索限制。 LDAP_SASL_BIND_IN_PROGRESS 0x0E 多階段綁定的中間綁定結(jié)果

          這篇文章中的信息適用于:
          ? Microsoft Windows 2000 Server
          ? Microsoft Windows 2000 Advanced Server
          ? Microsoft Windows 2000 Datacenter Server
          詳細(xì)的英文解釋:

          藍(lán)色是我的翻譯,紅色是不能確定的翻譯文字,黑色嘛,是原文。

          Hex Decimal Constant: Description
          0×00 0 LDAP_SUCCESS: Indicates the requested client operation completed successfully.
          成功,沒(méi)什么好說(shuō)的了。
          0×01 1 LDAP_OPERATIONS_ERROR: Indicates an internal error. The server is unable to respond with a more specific error and is also unable to properly respond to a request. It does not indicate that the client has sent an erroneous message.
          一個(gè)內(nèi)部錯(cuò)誤。Server無(wú)法正確的 respond 一個(gè)request,也無(wú)法生成說(shuō)明錯(cuò)誤類型的 respond 。它不代表client 發(fā)送了錯(cuò)誤的消息。 In NDS 8.3x through NDS 7.xx, this was the default error for NDS errors that did not map to an LDAP error code. To conform to the new LDAP drafts, NDS 8.5 uses 80 (0×50) for such errors.
          In NDS 8.3x through NDS 7.xx, 這是一個(gè)沒(méi)有映射到 LDAP錯(cuò)誤碼的NDS缺省錯(cuò)誤。為了符合新的 LDAP草案,NDS 8.5使用80 (0×50) 代表這個(gè)錯(cuò)誤。
          0×02 2 LDAP_PROTOCOL_ERROR: Indicates that the server has received an invalid or malformed request from the client.
          Server 從 client 收到了一個(gè)無(wú)效的或者格式不正確的request 。
          0×03 3 LDAP_TIMELIMIT_EXCEEDED: Indicates that the operation’s time limit specified by either the client or the server has been exceeded. On search operations, incomplete results are returned.
          超出了 Server或者Client指定的時(shí)間限制。當(dāng)進(jìn)行 serach的時(shí)候,返回不完全的結(jié)果。
          0×04 4 LDAP_SIZELIMIT_EXCEEDED: Indicates that in a search operation, the size limit specified by the client or the server has been exceeded. Incomplete results are returned.
          在查詢的時(shí)候,超出了Server或者 Client指定的size限制。返回不完全的結(jié)果。
          0×05 5 LDAP_COMPARE_FALSE: Does not indicate an error condition. Indicates that the results of a compare operation are false.
          不是錯(cuò)誤狀態(tài)。表示比較操作的結(jié)果是 false 。
          0×06 6 LDAP_COMPARE_TRUE: Does not indicate an error condition. Indicates that the results of a compare operation are true.
          不是錯(cuò)誤狀態(tài)。表示比較操作的結(jié)果是 true 。
          0×07 7 LDAP_AUTH_METHOD_NOT_SUPPORTED: Indicates that during a bind operation the client requested an authentication method not supported by the LDAP server.
          當(dāng)進(jìn)行bind操作時(shí), client指定的認(rèn)證方式不被LDAP Server支持。
          0×08 8 LDAP_STRONG_AUTH_REQUIRED: Indicates one of the following:

          • In bind requests, the LDAP server accepts only strong authentication.
          • In a client request, the client requested an operation such as delete that requires strong authentication.
          • In an unsolicited notice of disconnection, the LDAP server discovers the security protecting the communication between the client and server has unexpectedly failed or been compromised.

          代表下列情況之一:

          0×09 9 Reserved.
          保留的
          0×0A 10 LDAP_REFERRAL: Does not indicate an error condition. In LDAPv3, indicates that the server does not hold the target entry of the request, but that the servers in the referral field may.
          不是錯(cuò)誤狀態(tài)。在LDAPv3 中,代表Server無(wú)法得到請(qǐng)求的Entry 目標(biāo),但是可以介紹一個(gè)可能得到的域(field)
          0×0B 11 LDAP_ADMINLIMIT_EXCEEDED: Indicates that an LDAP server limit set by an administrative authority has been exceeded.
          LDAP Server 的被權(quán)限管理指定的有限集合被超出。
          0×0C 12 LDAP_UNAVAILABLE_CRITICAL_EXTENSION: Indicates that the LDAP server was unable to satisfy a request because one or more critical extensions were not available. Either the server does not support the control or the control is not appropriate for the operation type.
          LDAP Server不支持的request ,因?yàn)橐粋€(gè)或者多個(gè)重要的擴(kuò)展是不允許的。Server 不支持的Control或者Control 對(duì)于操作是不恰當(dāng)?shù)摹?/font>
          0×0D 13 LDAP_CONFIDENTIALITY_REQUIRED: Indicates that the session is not protected by a protocol such as Transport Layer Security (TLS), which provides session confidentiality.
          Session沒(méi)有被諸如Transport Layer Security (TLS) 之類的協(xié)議保護(hù),無(wú)法提供Session機(jī)密性。
          0×0E 14 LDAP_SASL_BIND_IN_PROGRESS: Does not indicate an error condition, but indicates that the server is ready for the next step in the process. The client must send the server the same SASL mechanism to continue the process.
          不是錯(cuò)誤狀態(tài),代表Server已經(jīng)為 process的下一步做好了準(zhǔn)備。Client必須發(fā)送相同的 SASL給Server以繼續(xù)process 。
          0×0F 15 Not used.
          未使用。
          0×10 16 LDAP_NO_SUCH_ATTRIBUTE: Indicates that the attribute specified in the modify or compare operation does not exist in the entry.
          在modify或者 compare操作中指定的屬性,在指定Entry中不存在。
          0×11 17 LDAP_UNDEFINED_TYPE: Indicates that the attribute specified in the modify or add operation does not exist in the LDAP server’s schema.
          在modify或者 add操作中指定的屬性,在LDAP Server的 Schema中不存在。
          0×12 18 LDAP_INAPPROPRIATE_MATCHING: Indicates that the matching rule specified in the search filter does not match a rule defined for the attribute’s syntax.
          在Search Filter 中指定的 rule不能和syntax中的rule 定義匹配。
          0×13 19 LDAP_CONSTRAINT_VIOLATION: Indicates that the attribute value specified in a modify, add, or modify DN operation violates constraints placed on the attribute. The constraint can be one of size or content (string only, no binary).
          在modify、 add或者modify DN 操作中指定的屬性值,觸犯了屬性中的限制。那些限制是內(nèi)容長(zhǎng)度或者內(nèi)容只能是String,不能是binary 等。
          0×14 20 LDAP_TYPE_OR_VALUE_EXISTS: Indicates that the attribute value specified in a modify or add operation already exists as a value for that attribute.
          在modify或者 add操作中指定的屬性值,在屬性中已經(jīng)存在了。
          0×15 21 LDAP_INVALID_SYNTAX: Indicates that the attribute value specified in an add, compare, or modify operation is an unrecognized or invalid syntax for the attribute.
          在add、 compare或者modify 操作中指定的屬性值,是不認(rèn)識(shí)或者無(wú)效的 syntax 。
          22-31 Not used.
          未使用。
          0×20 32 LDAP_NO_SUCH_OBJECT: Indicates the target object cannot be found. This code is not returned on following operations:

          • Search operations that find the search base but cannot find any entries that match the search filter.
          • Bind operations.

          無(wú)法找到目標(biāo)Object 。在以下操作中不返回這個(gè)代碼:

          • Search操作中沒(méi)有找到任何匹配serach filter entry
          • Bind操作。
          0×21 33 LDAP_ALIAS_PROBLEM: Indicates that an error occurred when an alias was dereferenced.
          當(dāng)一個(gè)別名被復(fù)引用時(shí)發(fā)生錯(cuò)誤。
          0×22 34 LDAP_INVALID_DN_SYNTAX: Indicates that the syntax of the DN is incorrect. (If the DN syntax is correct, but the LDAP server’s structure rules do not permit the operation, the server returns LDAP_UNWILLING_TO_PERFORM.)
          DN的句法不對(duì)。( 如果DN句法正確,但是LDAP Server 的結(jié)構(gòu)規(guī)則不許可這個(gè)操作,Server返回LDAP_UNWILLING_TO_PERFORM 。 )
          0×23 35 LDAP_IS_LEAF: Indicates that the specified operation cannot be performed on a leaf entry. (This code is not currently in the LDAP specifications, but is reserved for this constant.)
          指定的操作不能被實(shí)施于一個(gè)葉子Entry 上。( 這個(gè)錯(cuò)誤碼不在當(dāng)前的LDAP 規(guī)范中,但是這個(gè)常數(shù)為此而保留。 )
          0×24 36 LDAP_ALIAS_DEREF_PROBLEM: Indicates that during a search operation, either the client does not have access rights to read the aliased object’s name or dereferencing is not allowed.
          在search 操作中, client無(wú)權(quán)讀別名了的 對(duì)象名或者間接引用是不被許可的。
          37-47 Not used.
          未使用。
          0×30 48 LDAP_INAPPROPRIATE_AUTH: Indicates that during a bind operation, the client is attempting to use an authentication method that the client cannot use correctly. For example, either of the following cause this error:

          • The client returns simple credentials when strong credentials are required.
          • The client returns a DN and a password for a simple bind when the entry does not have a password defined.

          當(dāng)bind操作過(guò)程中, client試圖使用不正確的認(rèn)證方式。例如,以下情況造成這個(gè)error:

          • Client返回簡(jiǎn)單認(rèn)證當(dāng)需要strong credentials 的時(shí)候。
          • Client返回 DN和密碼為了簡(jiǎn)單認(rèn)證,但是 entry沒(méi)有定義密碼。
          0×31 49 LDAP_INVALID_CREDENTIALS: Indicates that during a bind operation one of the following occurred:

          • The client passed either an incorrect DN or password.
          • The password is incorrect because it has expired, intruder detection has locked the account, or some other similar reason.

          當(dāng)bind操作過(guò)程中發(fā)生以下情況:

          • Client傳送不正確的DN或者 password
          • 密碼不正確,因?yàn)樗^(guò)期了,入侵檢測(cè)鎖住了帳號(hào),或者其他類似原因。
          0×32 50 LDAP_INSUFFICIENT_ACCESS: Indicates that the caller does not have sufficient rights to perform the requested operation.
          調(diào)用者沒(méi)有足夠的權(quán)限執(zhí)行請(qǐng)求的操作。
          0×33 51 LDAP_BUSY: Indicates that the LDAP server is too busy to process the client request at this time but if the client waits and resubmits the request, the server may be able to process it then.
          LDAP Server太忙以至于無(wú)法處理client 的請(qǐng)求,但是如果client等待然后重新提交請(qǐng)求,Server 可能會(huì)處理。
          0×34 52 LDAP_UNAVAILABLE: Indicates that the LDAP server cannot process the client’s bind request, usually because it is shutting down.
          LDAP Server不能處理client 的bind請(qǐng)求,通常是因?yàn)樗黡own 機(jī)了。
          0×35 53 LDAP_UNWILLING_TO_PERFORM: Indicates that the LDAP server cannot process the request because of server-defined restrictions. This error is returned for the following reasons:

          • The add entry request violates the server’s structure rules.
          • The modify attribute request specifies attributes that users cannot modify.
          • Password restrictions prevent the action.
          • Connection restrictions prevent the action.

          LDAP Server不能處理request ,因?yàn)镾erver定義的限制。
          這個(gè)錯(cuò)誤在以下原因下發(fā)生:

          0×36 54 LDAP_LOOP_DETECT: Indicates that the client discovered an alias or referral loop, and is thus unable to complete this request.
          client 發(fā)現(xiàn)一個(gè)別名或者引用是循環(huán)的,導(dǎo)致這個(gè)request 無(wú)法完成。
          55-63 Not used.
          未使用。
          0×40 64 LDAP_NAMING_VIOLATION: Indicates that the add or modify DN operation violates the schema’s structure rules. For example,

          • The request places the entry subordinate to an alias.
          • The request places the entry subordinate to a container that is forbidden by the containment rules.
          • The RDN for the entry uses a forbidden attribute type.

          在 add或者 modify DN操作中違反Schema的結(jié)構(gòu)規(guī)則。例如:

          • 請(qǐng)求放置entry在別名下
          • 請(qǐng)求放置entry在被包含規(guī)則禁止的容器中
          • EntryRDN使用了禁止的屬性類型
          0×41 65 LDAP_OBJECT_CLASS_VIOLATION: Indicates that the add, modify, or modify DN operation violates the object class rules for the entry. For example, the following types of request return this error:

          • The add or modify operation tries to add an entry without a value for a required attribute.
          • The add or modify operation tries to add an entry with a value for an attribute which the class definition does not contain.
          • The modify operation tries to remove a required attribute without removing the auxiliary class that defines the attribute as required.

          在 add、 modify或者modify DN操作中違反 entry的object class規(guī)則。例如,下面類型的 request導(dǎo)致這個(gè)錯(cuò)誤:

          0×42 66 LDAP_NOT_ALLOWED_ON_NONLEAF: Indicates that the requested operation is permitted only on leaf entries. For example, the following types of requests return this error:

          • The client requests a delete operation on a parent entry.
          • The client request a modify DN operation on a parent entry.

          請(qǐng)求的操作只允許在葉子entry上執(zhí)行。例如下面類型的 request導(dǎo)致這個(gè)錯(cuò)誤:

          0×43 67 LDAP_NOT_ALLOWED_ON_RDN: Indicates that the modify operation attempted to remove an attribute value that forms the entry’s relative distinguished name.
          modify操作試圖刪除關(guān)聯(lián)著DN 的屬性值。
          0×44 68 LDAP_ALREADY_EXISTS: Indicates that the add operation attempted to add an entry that already exists, or that the modify operation attempted to rename an entry to the name of an entry that already exists.
          add操作試圖加一個(gè)已經(jīng)存在的Entry ,或者modify操作試圖重命名Entry 為一個(gè)已經(jīng)存在的entry的名字。
          0×45 69 LDAP_NO_OBJECT_CLASS_MODS: Indicates that the modify operation attempted to modify the structure rules of an object class.
          modify操作試圖改變object class 的結(jié)構(gòu)規(guī)則。
          0×46 70 LDAP_RESULTS_TOO_LARGE: Reserved for CLDAP.
          為CLDAP保留。
          0×47 71 LDAP_AFFECTS_MULTIPLE_DSAS: Indicates that the modify DN operation moves the entry from one LDAP server to another and thus requires more than one LDAP server.
          modify DN的操作移動(dòng)Entry 從一個(gè)LDAP Server到另一個(gè),造成需要超過(guò)一個(gè)LDAP Server 。
          72-79 Not used.
          未使用
          0×50 80 LDAP_OTHER: Indicates an unknown error condition. This is the default value for NDS error codes which do not map to other LDAP error codes.
          一個(gè)未知的error狀態(tài)。這是 NDS中沒(méi)有映射到其他LDAP錯(cuò)誤碼上的錯(cuò)誤碼的缺省值。

          posted on 2007-06-26 12:08 junky 閱讀(1588) 評(píng)論(0)  編輯  收藏 所屬分類: database

          主站蜘蛛池模板: 镇沅| 南汇区| 隆化县| 宁国市| 芜湖县| 双牌县| 晴隆县| 凤庆县| 麻江县| 油尖旺区| 五台县| 汉沽区| 揭西县| 濮阳市| 黄浦区| 西畴县| 靖安县| 大埔区| 原阳县| 北京市| 南康市| 房山区| 沈阳市| 迭部县| 伊金霍洛旗| 迁西县| 周口市| 西畴县| 和龙市| 泗水县| 忻城县| 陆良县| 玉门市| 盐池县| 手游| 务川| 南郑县| 万山特区| 六盘水市| 确山县| 和龙市|