CN length is greater than 64

- September 24, 2014

our ad has few objects cn length of on 64 characters. since maximum length of cn defined 64, seems odd. able find objects using following powershell script:

get-adobject -filter * -properties cn, objectcategory, objectclass |

where-object {$_.cn.length -gt 64 } |

fl name, cn, @{name='cn len';expression={($_.cn).length}}, objectclass, objectcategory

all of objects are cnf (conflict) objects. here's example of 1 of objects

name : srv-comp-factry-netoasis-change

cnf:aca8678f-25dc-47dd-b518-5aaaa9185e8a

cn : srv-comp-factry-netoasis-change

cnf:aca8678f-25dc-47dd-b518-5aaaa9185e8a

cn len : 72

objectclass : group

objectcategory : cn=group,cn=schema,cn=configuration,dc=mycompany,dc=com

notice length 72. can explain this?

i don't understand reply. cn defined schema single-valued unicode string minimum length of 1 , maximum length of 64. in environment have 4 objects (all cnf objects) seem violating maximum length rule. i don't see relevance of article referred to. can me understand?

thanks

these conflict objects. if ask why created, have tell based on understanding these object created during failure in dc locator process. let's consider example:

an application wants write on active directory (creating group), tries find dc initiate writes, once found, tries write active directory using selected domain controller. reason operation fails , not completed, point active directory has received request , processing it, although applications encounters error , indicates write not successful. next try, application select domain controller time write done no error. have 1 real object , 1 cnf object indicates there collision during process.

normally active directory capable of handling collisions since process can happen in half second, conflicted objects created. can safely remove these objects. have seen behavior in microsoft solutions sccm , vmware if dealing vdi , creating desktops.

mahdi tehrani | | www.mahditehrani.ir
please click on propose answer or mark post , helpful other people.
posting provided as-is no warranties, , confers no rights.