{"id":5,"date":"2005-04-20T16:12:54","date_gmt":"2005-04-20T21:12:54","guid":{"rendered":"http:\/\/stein.everybody.org\/brain\/?p=5"},"modified":"2011-03-10T10:57:35","modified_gmt":"2011-03-10T15:57:35","slug":"ldap-error-code-53-00002077-svcerr-dsid-031907b4-problem-5003-will_not_perform-data-0","status":"publish","type":"post","link":"https:\/\/jeremystein.com\/brain\/ldap-error-code-53-00002077-svcerr-dsid-031907b4-problem-5003-will_not_perform-data-0\/","title":{"rendered":"LDAP: error code 53 &#8211; 00002077: SvcErr: DSID-031907B4, problem 5003 (WILL_NOT_PERFORM), data 0"},"content":{"rendered":"<p>I got that message because I tried to create an Active Directory user object with a password.  The password can only be set on an existing user.  You have to create the inital user with the password-not-required flag (0x0020).  A normal account with that flag would have userAccountControl set to 0x0220.  Then you can go back and set the password (and update the userAccountControl).<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;<\/p>\n<p>I also got that message when I tried to set primaryGroupID or sAMAccountType.  It seems to automatically set them to the values I wanted (513 and 0x30000000), but won&#8217;t let me set them explicitly.<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;<\/p>\n<p>I also got that message when I tried to turn off the PASSWD_NOTREQD flag (0x0020).<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;<\/p>\n<p>I also go that message before I figured out how to properly <a href=\"http:\/\/stein.everybody.org\/brain\/how-to-set-an-active-directory-password-through-directory-integrator\/\">set the Active Directory password through Directory Integrator<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I got that message because I tried to create an Active Directory user object with a password. The password can only be set on an existing user. You have to create the inital user with the password-not-required flag (0x0020). A normal account with that flag would have userAccountControl set to 0x0220. Then you can go [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[35],"tags":[],"class_list":["post-5","post","type-post","status-publish","format-standard","hentry","category-ldap"],"_links":{"self":[{"href":"https:\/\/jeremystein.com\/brain\/wp-json\/wp\/v2\/posts\/5","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jeremystein.com\/brain\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jeremystein.com\/brain\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jeremystein.com\/brain\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jeremystein.com\/brain\/wp-json\/wp\/v2\/comments?post=5"}],"version-history":[{"count":0,"href":"https:\/\/jeremystein.com\/brain\/wp-json\/wp\/v2\/posts\/5\/revisions"}],"wp:attachment":[{"href":"https:\/\/jeremystein.com\/brain\/wp-json\/wp\/v2\/media?parent=5"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jeremystein.com\/brain\/wp-json\/wp\/v2\/categories?post=5"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jeremystein.com\/brain\/wp-json\/wp\/v2\/tags?post=5"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}