My Oracle Support Banner

'mod dn' (modrdn with New Parent) Fails With Error : "This server is configured to refuse to move entries." - How to Move the Entry Within the Directory Information Tree (DIT) (Doc ID 1318583.1)

Last updated on MAY 17, 2018

Applies to:

Oracle Directory Server Enterprise Edition - Version 6.0 and later
Information in this document applies to any platform.


There are times when one may be wanting to move an entry, whether for renaming purposes or perhaps in resolving a replication conflict.

If you are doing a mod dn to move an entry within the DIT, you may get an error as shown below:

ldapmodify -D "cn=directory manager" -w dirmanager -p 6289

modifying RDN of entry uid=user.4,ou=people,dc=test,dc=com and/or moving it beneath a new parent

ldap_rename: DSA is unwilling to perform
ldap_rename: additional info: This server is configured to refuse to move entries.

The corresponding access logs show:

[09/May/2011:12:09:09 -0700] conn=9 op=1 msgId=2 - MODRDN dn="uid=user.4,ou=people,dc=test,dc=com" newrdn="uid=newrdn4" newsuperior="dc=test,dc=com"
[09/May/2011:12:09:09 -0700] conn=9 op=1 msgId=2 - RESULT err=53 tag=109 nentries=0 etime=0, This server is configured to refuse to move entries.

(nothing is logged in the error logs)


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.