Lightweight Directory Access Protocol (LDAP) Parameters

Last Updated
Available Formats



Plain text

Registries included below

Internet Directory Numbers ( [])

Registration Procedure(s)
Expert Review with Specification Required
Directory OIDs are assigned to RFCs for their use in identifying
directory (and possibly other) objects in accordance with BCP 64 [RFC 4520].
The referenced RFC should be consulted for information about
these assignments.
Available Formats

Decimal Name Description Reference
0 Reserved Reserved for future use [IANA]
1 nisSchema Network Info Service Schema [RFC2307]
2 NameForm Naming Plan [RFC2377]
3 AuxObject Auxiliary Object Class [RFC2377]
4 vendorName Vendor Name [RFC3045]
5 vendorVersion Vendor Version [RFC3045]
6 pcimSchema Policy Core Information Model LDAP Schema [RFC3703]
7 LCUP LDAP Client Update Protocol [RFC3928]
8 cancelOp LDAP Cancel Operation [RFC3909]
9 pcelsSchema PCELS Schema [RFC4104]
10 uddi Universal Description, Discovery & Integration [RFC4403]
11 vPIM Voice Messaging Directory Service [RFC4237]
12 assertion Assertion Control [RFC4528]
13 ReadEntry Read Entry Controls [RFC4527]
14 increment LDAP Modify-Increment [RFC4525]
15 x509 x.509 Certificates [RFC4523]
16 uuid entryUUID [RFC4530]
17 LBURP LDAP Bulk Update/Replication Protocol [RFC4373]
18 ASN1 module LDAP ASN.1 Module [RFC4511]
19 turn LDAP Turn Operation [RFC4531]
20 entryDN LDAP entryDN Operational Attribute [RFC5020]
21 txn LDAP Transactions [RFC5805]
22 dontUseCopy LDAP Don't Use Copy Control [RFC6171]

Protocol Mechanisms

Registration Procedure(s)
First Come First Served
C => Control
E => Extension
F => Feature
N => Unsolicited Notice
Available Formats

Object Identifier Type Description Reference
1.2.826.0.1.3344810.2.3 C Matched Values Control [RFC3876]
1.2.840.113556.1.4.319 C LDAP Simple Paged Results Control [RFC2696]
1.2.840.113556.1.4.473 C Sort Request [RFC2891]
1.2.840.113556.1.4.474 C Sort Response [RFC2891] C LCUP Sync Request Control [RFC3928] C LCUP Sync Update Control [RFC3928] C LCUP Sync Done Control [RFC3928] E Cancel Operation [RFC3909] C Assertion Control [RFC4528] C LDAP Pre-read Control [RFC4527] C LDAP Post-read Control [RFC4527] F Modify-Increment [RFC4525] E Start Transaction Extended Request [RFC5805] C Transaction Specification Control [RFC5805] E End Transaction Extended Request [RFC5805] N Aborted Transaction Notice [RFC5805] E Dynamic Refresh [RFC2589] E StartTLS [RFC4511][RFC4513] F All Op Attrs [RFC3673] F OC AD Lists [RFC4529] F True/False filters [RFC4526] F Language Tag Options [RFC3866] F Language Range Options [RFC3866] C LDAP Content Synchronization Control [RFC4533] C Subentries [RFC3672] E Modify Password [RFC3062] E Who am I? [RFC4532] E StartLBURPRequest LDAP ExtendedRequest message [RFC4373] E StartLBURPResponse LDAP ExtendedResponse message [RFC4373] E EndLBURPRequest LDAP ExtendedRequest message [RFC4373] E EndLBURPResponse LDAP ExtendedResponse message [RFC4373] E LBURPUpdateRequest LDAP ExtendedRequest message [RFC4373] E LBURPUpdateResponse LDAP ExtendedResponse message [RFC4373] F LBURP Incremental Update style OID [RFC4373] E LDAP Turn Operation [RFC4531]
2.16.840.1.113730.3.4.2 C ManageDsaIT [RFC3296]
2.16.840.1.113730.3.4.15 C Authorization Identity Response Control [RFC3829]
2.16.840.1.113730.3.4.16 C Authorization Identity Request Control [RFC3829]
2.16.840.1.113730.3.4.18 C Proxy Authorization Control [RFC4370] C LDAP Don't Use Copy Control [RFC6171]

Object Identifier Descriptors

Registration Procedure(s)
x-  Private Use (can not be registered)
e-  Reserved for Experiments, First Come First Served
All others:  Expert Review
Kurt Zeilenga
A => Attribute Type
C => DIT Content Rule
E => LDAP URL Extension
F => Family
M => Matching Rule
N => Name Form
O => Object Class
R => Administrative Role
* => The registration is historic in nature
Available Formats

Name Type OID Reference
accessControlInnerArea R [RFC3672]
accessControlSpecificArea R [RFC3672]
account O 0.9.2342.19200300.100.4.5 [RFC4524]
add A Reserved for LDIF [RFC2849]
administrativeRole A [RFC3672]
administratorsAddress A [Mark_Wahl]
algorithmIdentifierMatch M [RFC4523]
alias O [RFC4512]
aliasedEntryName A [X.501]
aliasedObjectName A [RFC4512]
allComponentsMatch M [RFC3687]
altServer A [RFC4512]
applicationEntity O [RFC2256]
applicationProcess O [RFC4519]
aRecord A 0.9.2342.19200300.100.1.26 [RFC1274]
associatedDomain A 0.9.2342.19200300.100.1.37 [RFC4524]
associatedInternetGateway A [RFC2164]
associatedName A 0.9.2342.19200300.100.1.38 [RFC4524]
associatedORAddress A [RFC2164]
associatedX400Gateway A [RFC2164]
attributeMap A [RFC4876]
attributeTypes A [RFC4512]
audio A 0.9.2342.19200300.100.1.55 [RFC1274]
authenticationMethod A [RFC4876]
authorityRevocationList A [RFC4523]
autonomousArea R [RFC3672]
bindTimeLimit A [RFC4876]
bitStringMatch M [RFC4517]
booleanMatch M [RFC4517]
buildingName A 0.9.2342.19200300.100.1.48 [RFC4524]
businessCategory A [RFC4519]
c A [RFC4519]
c-FacsimileTelephoneNumber A [RFC3671]
c-InternationalISDNNumber A [RFC3671]
c-l A [RFC3671]
c-PhysicalDeliveryOffice A [RFC3671]
c-PostalAddress A [RFC3671]
c-PostalCode A [RFC3671]
c-PostOfficeBox A [RFC3671]
c-o A [RFC3671]
c-ou A [RFC3671]
c-st A [RFC3671]
c-street A [RFC3671]
c-TelephoneNumber A [RFC3671]
c-TelexNumber A [RFC3671]
cACertificate A [RFC4523]
calCalAdrURI A 1.2.840.113556.1.4.481 [RFC2739]
calCalURI A 1.2.840.113556.1.4.478 [RFC2739]
calCAPURI A 1.2.840.113556.1.4.480 [RFC2739]
calEntry O 1.2.840.113556.1.5.87 [RFC2739]
calFBURL A 1.2.840.113556.1.4.479 [RFC2739]
calOtherCalAdrURIs A 1.2.840.113556.1.4.485 [RFC2739]
calOtherCalURIs A 1.2.840.113556.1.4.482 [RFC2739]
calOtherCAPURIs A 1.2.840.113556.1.4.484 [RFC2739]
calOtherFBURLs A 1.2.840.113556.1.4.483 [RFC2739]
caseExactIA5Match M [RFC4517]
caseExactMatch M [RFC4517]
caseExactOrderingMatch M [RFC4517]
caseExactSubstringsMatch M [RFC4517]
caseIgnoreIA5Match M [RFC4517]
caseIgnoreIA5SubstringsMatch M [RFC4517]
caseIgnoreListMatch M [RFC4517]
caseIgnoreListSubstringsMatch M [RFC4517]
caseIgnoreMatch M [RFC4517]
caseIgnoreOrderingMatch M [RFC4517]
caseIgnoreSubstringsMatch M [RFC4517]
certificateExactMatch M [RFC4523]
certificateListExactMatch M [RFC4523]
certificateListMatch M [RFC4523]
certificateMatch M [RFC4523]
certificatePairExactMatch M [RFC4523]
certificatePairMatch M [RFC4523]
certificateRevocationList A [RFC4523]
certificationAuthority O [RFC4523]
certificationAuthority-V2 O [RFC4523]
changetype A Reserved for LDIF [RFC2849]
cn A [RFC4519]
cNAMERecord A 0.9.2342.19200300.100.1.31 [RFC1274]
co A 0.9.2342.19200300.100.1.43 [RFC4524]
collectiveAttributeInnerArea R [RFC3672]
collectiveAttributeSpecificArea R [RFC3672]
collectiveAttributeSubentries A [RFC3671]
collectiveAttributeSubentry O [RFC3671]
collectiveExclusions A [RFC3671]
commonName A [RFC4519]
componentFilterMatch M [RFC3687]
control A Reserved for LDIF [RFC2849]
country O [RFC4519]
countryName A [RFC4519]
createTimestamp A [RFC4512]
creatorsName A [RFC4512]
credentialLevel A [RFC4876]
cRLDistributionPoint O [RFC4523]
crossCertificatePair A [RFC4523]
DC A 0.9.2342.19200300.100.1.25 [RFC4519]
dcObject O [RFC4519]
defaultServerList A [RFC4876]
defaultSearchBase A [RFC4876]
defaultSearchScope A [RFC4876]
delete A Reserved for LDIF [RFC2849]
deleteoldrdn A Reserved for LDIF [RFC2849]
deltaCRL O [RFC4523]
deltaRevocationList A [RFC4523]
dereferenceAliases A [RFC4876]
description A [RFC4519]
destinationIndicator A [RFC4519]
device O [RFC4519]
directoryComponentsMatch M [RFC3687]
directoryStringFirstComponentMatch M [RFC4517]
distinguishedName A [RFC4519]
distinguishedNameMatch M [RFC4517]
distinguishedNameTableEntry O [RFC2293]
distinguishedNameTableKey A [RFC2293]
dITContentRules A [RFC4512]
dITRedirect A 0.9.2342.19200300.100.1.54 [RFC1274]
dITStructureRules A [RFC4512]
dmd O [RFC2256]
dmdName A [RFC2256]
dn A Reserved for LDIF [RFC2849]
dnQualifier A [RFC4519]
dNSDomain O 0.9.2342.19200300.100.4.15 [RFC1274]
document O 0.9.2342.19200300.100.4.6 [RFC4524]
documentAuthor A 0.9.2342.19200300.100.1.14 [RFC4524]
documentIdentifier A 0.9.2342.19200300.100.1.11 [RFC4524]
documentLocation A 0.9.2342.19200300.100.1.15 [RFC4524]
documentPublisher A 0.9.2342.19200300.100.1.56 [RFC4524]
documentSeries O 0.9.2342.19200300.100.4.8 [RFC4524]
documentTitle A 0.9.2342.19200300.100.1.12 [RFC4524]
documentVersion A 0.9.2342.19200300.100.1.13 [RFC4524]
domain O 0.9.2342.19200300.100.4.13 [RFC4524]
domainComponent A 0.9.2342.19200300.100.1.25 [RFC4519]
domainNameForm N [RFC2247]
domainRelatedObject O 0.9.2342.19200300.100.4.17 [RFC4524]
drink A 0.9.2342.19200300.100.1.5 [RFC4524]
dSA O [RFC2256]
dSAQuality A 0.9.2342.19200300.100.1.49 [RFC1274]
DUAConfigProfile O [RFC4876]
dynamicObject O [RFC2589]
dynamicSubtrees A [RFC2589]
e-com-seafreeze-* F N/A [Allen_Williams]
e-com-westjet-* F N/A [Matthew_Key]
email A 1.2.840.113549.1.9.1 [RFC3280]
emailAddress A 1.2.840.113549.1.9.1 [RFC3280]
enhancedSearchGuide A [RFC4519]
entryDN A [RFC5020]
entryTtl A [RFC2589]
entryUUID A [RFC4530]
extensibleObject O [RFC4512]
facsimileTelephoneNumber A [RFC4519]
favouriteDrink A* 0.9.2342.19200300.100.1.5 [RFC4524]
fedfsAnnotation A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsDescr A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsFsl O [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsFslHost A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsFslPort A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsFslTTL A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsFslUuid A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsFsn O [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsFsnTTL A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsFsnUuid A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNceDN A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNcePrefix A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNetAddr A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNetPort A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsClassChange A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsClassFileid A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsClassHandle A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsClassReaddir A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsClassSimul A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsClassWritever A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsCurrency A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsFsl O [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsGenFlagGoing A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsGenFlagSplit A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsGenFlagWritable A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsMajorVer A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsMinorVer A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsPath A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsReadOrder A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsReadRank A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsTransFlagRdma A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsURI A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsValidFor A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsVarSub A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsWriteOrder A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNfsWriteRank A [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNsdbContainerInfo O [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNsdbName A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsNsdbPort A* [RFC-ietf-nfsv4-federated-fs-protocol-15]
fedfsUuid A [RFC-ietf-nfsv4-federated-fs-protocol-15]
followReferrals A [RFC4876]
friendlyCountry O 0.9.2342.19200300.100.4.18 [RFC4524]
friendlyCountryName A* 0.9.2342.19200300.100.1.43 [RFC4524]
generalizedTimeMatch M [RFC4517]
generalizedTimeOrderingMatch M [RFC4517]
generationQualifier A [RFC4519]
givenName A [RFC4519]
governingStructureRule A [RFC4512]
groupOfNames O [RFC4519]
groupOfUniqueNames O [RFC4519]
homePhone A 0.9.2342.19200300.100.1.20 [RFC4524]
homePostalAddress A 0.9.2342.19200300.100.1.39 [RFC4524]
homeTelephone A* 0.9.2342.19200300.100.1.20 [RFC4524]
host A 0.9.2342.19200300.100.1.9 [RFC4524]
houseIdentifier A [RFC4519]
increment A Reserved for LDIF [RFC4525]
info A 0.9.2342.19200300.100.1.4 [RFC4524]
initials A [RFC4519]
integerFirstComponentMatch M [RFC4517]
integerMatch M [RFC4517]
integerOrderingMatch M [RFC4517]
internationaliSDNNumber A [RFC4519]
janetMailbox A 0.9.2342.19200300.100.1.46 [RFC1274]
jpegPhoto A 0.9.2342.19200300.100.1.60 [RFC2798]
keywordMatch M [RFC4517]
knowledgeInformation A [RFC2256]
L A [RFC4519]
labeledURI A [RFC2079]
labeledURIObject O [RFC2079]
lastModifiedBy A 0.9.2342.19200300.100.1.24 [RFC1274]
lastModifiedTime A 0.9.2342.19200300.100.1.23 [RFC1274]
ldapSyntaxes A [RFC4512]
LDIFLocationURL A [RFC6109]
LDIFLocationURLObject O [RFC6109]
locality O [RFC4519]
localityName A [RFC4519]
mail A 0.9.2342.19200300.100.1.3 [RFC4524]
mailPreferenceOption A 0.9.2342.19200300.100.1.47 [RFC1274]
mailReceipt A [RFC6109]
manager A 0.9.2342.19200300.100.1.10 [RFC4524]
managedDomains A [RFC6109]
matchingRules A [RFC4512]
matchingRuleUse A [RFC4512]
mcgamTables A [RFC2164]
mDRecord A 0.9.2342.19200300.100.1.27 [RFC1274]
member A [RFC4519]
mixerGateway O [RFC2164]
mobile A 0.9.2342.19200300.100.1.41 [RFC4524]
mobileTelephoneNumber A* 0.9.2342.19200300.100.1.41 [RFC4524]
moddn A Reserved for LDIF [RFC2849]
modifiersName A [RFC4512]
modify A Reserved for LDIF [RFC2849]
modrdn A Reserved for LDIF [RFC2849]
modifyTimestamp A [RFC4512]
mXRecord A 0.9.2342.19200300.100.1.28 [RFC1274]
name A [RFC4519]
nameForms A [RFC4512]
namingContexts A [RFC4512]
newrdn A Reserved for LDIF [RFC2849]
newsuperior A Reserved for LDIF [RFC2849]
nSRecord A 0.9.2342.19200300.100.1.29 [RFC1274]
numericStringMatch M [RFC4517]
numericStringOrderingMatch M [RFC4517]
numericStringSubstringsMatch M [RFC4517]
o A [RFC4519]
objectClass A [RFC4512]
objectClasses A [RFC4512]
objectclassMap A [RFC4876]
objectIdentifierFirstComponentMatch M [RFC4517]
objectIdentifierMatch M [RFC4517]
octetStringMatch M [RFC4517]
octetStringOrderingMatch M [RFC4517]
omittedORAddressComponent O [RFC2164]
oRAddressComponentType A [RFC2164]
organization O [RFC4519]
organizationalPerson O [RFC4519]
organizationalRole O [RFC4519]
organizationalStatus A 0.9.2342.19200300.100.1.45 [RFC4524]
organizationalUnit O [RFC4519]
organizationalUnitName A [RFC4519]
organizationName A [RFC4519]
otherMailbox A 0.9.2342.19200300.100.1.22 [RFC1274]
ou A [RFC4519]
owner A [RFC4519]
pager A 0.9.2342.19200300.100.1.42 [RFC4524]
pagerTelephoneNumber A* 0.9.2342.19200300.100.1.42 [RFC4524]
pcels8021Filter O [RFC4104]
pcels8021HdrDestMACAddress A [RFC4104]
pcels8021HdrDestMACMask A [RFC4104]
pcels8021HdrPriority A [RFC4104]
pcels8021HdrProtocolID A [RFC4104]
pcels8021HdrSourceMACAddress A [RFC4104]
pcels8021HdrSourceMACMask A [RFC4104]
pcels8021HdrVLANID A [RFC4104]
pcelsActionAssociation O [RFC4104]
pcelsActionList A [RFC4104]
pcelsBitStringList A [RFC4104]
pcelsBitStringValueAuxClass O [RFC4104]
pcelsBoolean A [RFC4104]
pcelsBooleanValueAuxClass O [RFC4104]
pcelsCompoundActionAuxClass O [RFC4104]
pcelsCompoundConditionAuxClass O [RFC4104]
pcelsCompoundFilterConditionAuxClass O [RFC4104]
pcelsConditionAssociation O [RFC4104]
pcelsConditionList A [RFC4104]
pcelsConditionListType A [RFC4104]
pcelsCoSVariableAuxClass O [RFC4104]
pcelsDecisionStrategy A [RFC4104]
pcelsDestinationIPv4VariableAuxClass O [RFC4104]
pcelsDestinationIPv6VariableAuxClass O [RFC4104]
pcelsDestinationMACVariableAuxClass O [RFC4104]
pcelsDestinationPortVariableAuxClass O [RFC4104]
pcelsDestinationSAPVariableAuxClass O [RFC4104]
pcelsDSCPVariableAuxClass O [RFC4104]
pcelsElementList A [RFC4104]
pcelsEthertypeVariableAuxClass O [RFC4104]
pcelsExecutionStrategy A [RFC4104]
pcelsExpectedValueList A [RFC4104]
pcelsExpectedValueTypes A [RFC4104]
pcelsExplicitVariableAuxClass O [RFC4104]
pcelsFilterDirection A [RFC4104]
pcelsFilterEntryBase O [RFC4104]
pcelsFilterEntryList A [RFC4104]
pcelsFilterIsNegated A [RFC4104]
pcelsFilterListAuxClass O [RFC4104]
pcelsFilterListName A [RFC4104]
pcelsFilterName A [RFC4104]
pcelsFlowDirectionVariableAuxClass O [RFC4104]
pcelsFlowIdVariableAuxClass O [RFC4104]
pcelsGroup O [RFC4104]
pcelsGroupAuxClass O [RFC4104]
pcelsGroupInstance O [RFC4104]
pcelsImplicitVariableAuxClass O [RFC4104]
pcelsIntegerList A [RFC4104]
pcelsIntegerValueAuxClass O [RFC4104]
pcelsIPHdrDestAddress A [RFC4104]
pcelsIPHdrDestAddressEndOfRange A [RFC4104]
pcelsIPHdrDestMask A [RFC4104]
pcelsIPHdrDestPortEnd A [RFC4104]
pcelsIPHdrDestPortStart A [RFC4104]
pcelsIPHdrDSCPList A [RFC4104]
pcelsIPHdrFlowLabel A [RFC4104]
pcelsIPHdrProtocolID A [RFC4104]
pcelsIPHdrSourceAddress A [RFC4104]
pcelsIPHdrSourceAddressEndOfRange A [RFC4104]
pcelsIPHdrSourceMask A [RFC4104]
pcelsIPHdrSourcePortEnd A [RFC4104]
pcelsIPHdrSourcePortStart A [RFC4104]
pcelsIPHdrVersion A [RFC4104]
pcelsIPHeadersFilter O [RFC4104]
pcelsIPProtocolVariableAuxClass O [RFC4104]
pcelsIPToSVariableAuxClass O [RFC4104]
pcelsIPv4AddrList A [RFC4104]
pcelsIPv4AddrValueAuxClass O [RFC4104]
pcelsIPv6AddrList A [RFC4104]
pcelsIPv6AddrValueAuxClass O [RFC4104]
pcelsIPVersionVariableAuxClass O [RFC4104]
pcelsIsMirrored A [RFC4104]
pcelsMACAddrList A [RFC4104]
pcelsMACAddrValueAuxClass O [RFC4104]
pcelsPolicySet O [RFC4104]
pcelsPolicySetAssociation O [RFC4104]
pcelsPolicySetDN A [RFC4104]
pcelsPolicySetList A [RFC4104]
pcelsPolicySetName A [RFC4104]
pcelsPriority A [RFC4104]
pcelsReusableContainer O [RFC4104]
pcelsReusableContainerAuxClass O [RFC4104]
pcelsReusableContainerInstance O [RFC4104]
pcelsReusableContainerList A [RFC4104]
pcelsReusableContainerName A [RFC4104]
pcelsRole A [RFC4104]
pcelsRoleCollection O [RFC4104]
pcelsRoleCollectionName A [RFC4104]
pcelsRule O [RFC4104]
pcelsRuleAuxClass O [RFC4104]
pcelsRuleInstance O [RFC4104]
pcelsRuleValidityPeriodList A [RFC4104]
pcelsSequencedActions A [RFC4104]
pcelsSimpleActionAuxClass O [RFC4104]
pcelsSimpleConditionAuxClass O [RFC4104]
pcelsSNAPOUIVariableAuxClass O [RFC4104]
pcelsSNAPTypeVariableAuxClass O [RFC4104]
pcelsSourceIPv4VariableAuxClass O [RFC4104]
pcelsSourceIPv6VariableAuxClass O [RFC4104]
pcelsSourceMACVariableAuxClass O [RFC4104]
pcelsSourcePortVariableAuxClass O [RFC4104]
pcelsSourceSAPVariableAuxClass O [RFC4104]
pcelsStringList A [RFC4104]
pcelsStringValueAuxClass O [RFC4104]
pcelsValueAuxClass O [RFC4104]
pcelsValueDN A [RFC4104]
pcelsValueName A [RFC4104]
pcelsVariable O [RFC4104]
pcelsVariableDN A [RFC4104]
pcelsVariableModelClass A [RFC4104]
pcelsVariableModelProperty A [RFC4104]
pcelsVariableName A [RFC4104]
pcelsVendorValueAuxClass O [RFC4104]
pcelsVendorValueData A [RFC4104]
pcelsVendorValueEncoding A [RFC4104]
pcelsVendorVariableAuxClass O [RFC4104]
pcelsVendorVariableData A [RFC4104]
pcelsVendorVariableEncoding A [RFC4104]
pcelsVLANVariableAuxClass O [RFC4104]
pcimPolicy O [RFC3703]
pcimGroup O [RFC3703]
pcimGroupAuxClass O [RFC3703]
pcimGroupInstance O [RFC3703]
pcimRule O [RFC3703]
pcimRuleAuxClass O [RFC3703]
pcimRuleInstance O [RFC3703]
pcimRuleConditionAssociation O [RFC3703]
pcimRuleValidityAssociation O [RFC3703]
pcimRuleActionAssociation O [RFC3703]
pcimConditionAuxClass O [RFC3703]
pcimTPCAuxClass O [RFC3703]
pcimConditionVendorAuxClass O [RFC3703]
pcimActionAuxClass O [RFC3703]
pcimActionVendorAuxClass O [RFC3703]
pcimPolicyInstance O [RFC3703]
pcimElementAuxClass O [RFC3703]
pcimRepository O [RFC3703]
pcimRepositoryAuxClass O [RFC3703]
pcimRepositoryInstance O [RFC3703]
pcimSubtreesPtrAuxClass O [RFC3703]
pcimGroupContainmentAuxClass O [RFC3703]
pcimRuleContainmentAuxClass O [RFC3703]
pcimKeywords A [RFC3703]
pcimGroupName A [RFC3703]
pcimRuleName A [RFC3703]
pcimRuleEnabled A [RFC3703]
pcimRuleConditionListType A [RFC3703]
pcimRuleConditionList A [RFC3703]
pcimRuleActionList A [RFC3703]
pcimRuleValidityPeriodList A [RFC3703]
pcimRuleUsage A [RFC3703]
pcimRulePriority A [RFC3703]
pcimRuleMandatory A [RFC3703]
pcimRuleSequencedActions A [RFC3703]
pcimRoles A [RFC3703]
pcimConditionGroupNumber A [RFC3703]
pcimConditionNegated A [RFC3703]
pcimConditionName A [RFC3703]
pcimConditionDN A [RFC3703]
pcimValidityConditionName A [RFC3703]
pcimTimePeriodConditionDN A [RFC3703]
pcimActionName A [RFC3703]
pcimActionOrder A [RFC3703]
pcimActionDN A [RFC3703]
pcimTPCTime A [RFC3703]
pcimTPCMonthOfYearMask A [RFC3703]
pcimTPCDayOfMonthMask A [RFC3703]
pcimTPCDayOfWeekMask A [RFC3703]
pcimTPCTimeOfDayMask A [RFC3703]
pcimTPCLocalOrUtcTime A [RFC3703]
pcimVendorConstraintData A [RFC3703]
pcimVendorConstraintEncoding A [RFC3703]
pcimVendorActionData A [RFC3703]
pcimVendorActionEncoding A [RFC3703]
pcimPolicyInstanceName A [RFC3703]
pcimRepositoryName A [RFC3703]
pcimSubtreesAuxContainedSet A [RFC3703]
pcimGroupsAuxContainedSet A [RFC3703]
pcimRulesAuxContainedSet A [RFC3703]
person O [RFC4519]
personalSignature A 0.9.2342.19200300.100.1.53 [RFC1274]
personalTitle A 0.9.2342.19200300.100.1.40 [RFC4524]
photo A 0.9.2342.19200300.100.1.7 [RFC1274]
physicalDeliveryOfficeName A [RFC4519]
pilotDSA O 0.9.2342.19200300.100.4.21 [RFC1274]
pilotObject O 0.9.2342.19200300.100.4.3 [RFC1274]
pilotOrganization O 0.9.2342.19200300.100.4.20 [RFC1274]
pilotPerson O 0.9.2342.19200300.100.4.4 [RFC1274]
pkiCA O [RFC4523]
pkiUser O [RFC4523]
postalAddress A [RFC4519]
postalCode A [RFC4519]
postOfficeBox A [RFC4519]
preferredDeliveryMethod A [RFC4519]
preferredServerList A [RFC4876]
presentationAddress A [RFC2256]
presentationAddressMatch M [RFC2252]
presentMatch M [RFC3687]
printer-aliases A [RFC3712]
printer-charset-configured A [RFC3712]
printer-charset-supported A [RFC3712]
printer-color-supported A [RFC3712]
printer-compression-supported A [RFC3712]
printer-copies-supported A [RFC3712]
printer-current-operator A [RFC3712]
printer-delivery-orientation-supported A [RFC3712]
printer-document-format-supported A [RFC3712]
printer-finishings-supported A [RFC3712]
printer-generated-natural-language-supported A [RFC3712]
printer-info A [RFC3712]
printer-ipp-versions-supported A [RFC3712]
printer-job-priority-supported A [RFC3712]
printer-job-k-octets-supported A [RFC3712]
printer-location A [RFC3712]
printer-make-and-model A [RFC3712]
printer-media-local-supported A [RFC3712]
printer-media-supported A [RFC3712]
printer-more-info A [RFC3712]
printer-multiple-document-jobs-supported A [RFC3712]
printer-name A [RFC3712]
printer-natural-language-configured A [RFC3712]
printer-number-up-supported A [RFC3712]
printer-output-features-supported A [RFC3712]
printer-pages-per-minute A [RFC3712]
printer-pages-per-minute-color A [RFC3712]
printer-print-quality-supported A [RFC3712]
printer-resolution-supported A [RFC3712]
printer-service-person A [RFC3712]
printer-sides-supported A [RFC3712]
printer-stacking-order-supported A [RFC3712]
printer-uri A [RFC3712]
printer-xri-supported A [RFC3712]
printerAbstract O [RFC3712]
printerIPP O [RFC3712]
printerLPR O [RFC3712]
printerService O [RFC3712]
printerServiceAuxClass O [RFC3712]
profileTTL A [RFC4876]
protocolInformation A [RFC2256]
protocolInformationMatch M [RFC2252]
provider O [RFC6109]
providerCertificate A [RFC6109]
providerCertificateHash A [RFC6109]
providerName A [RFC6109]
providerUnit A [RFC6109]
pseudonym A [RFC3280]
qualityLabelledData O 0.9.2342.19200300.100.4.22 [RFC1274]
rdnMatch M [RFC3687]
ref A 2.16.840.1.113730.3.1.34 [RFC3296]
referral 0 2.16.840.1.113730.3.2.6 [RFC3296]
registeredAddress A [RFC4519]
replace A Reserved for LDIF [RFC2849]
residentialPerson O [RFC4519]
RFC822LocalPart O 0.9.2342.19200300.100.4.14 [RFC4524]
RFC822Mailbox A* 0.9.2342.19200300.100.1.3 [RFC4524]
rFC822ToX400Mapping O [RFC2164]
roleOccupant A [RFC4519]
room O 0.9.2342.19200300.100.4.7 [RFC4524]
roomNumber A 0.9.2342.19200300.100.1.6 [RFC4524]
searchGuide A [RFC4519]
searchTimeLimit A [RFC4876]
secretary A 0.9.2342.19200300.100.1.21 [RFC4524]
seeAlso A [RFC4519]
serialNumber A [RFC4519]
serviceAuthenticationMethod A [RFC4876]
serviceCredentialLevel A [RFC4876]
serviceSearchDescriptor A [RFC4876]
simpleSecurityObject O 0.9.2342.19200300.100.4.19 [RFC4524]
singleLevelQuality A 0.9.2342.19200300.100.1.50 [RFC4524]
slpServicePrinter O [RFC3712]
sn A [RFC4519]
sOARecord A 0.9.2342.19200300.100.1.30 [RFC1274]
st A [RFC4519]
stateOrProvinceName A [RFC2256]
storedPrefixMatch M [RFC3698]
street A [RFC4519]
streetAddress A [RFC2256]
strongAuthenticationUser O [RFC4523]
structuralObjectClass A [RFC4512]
subentry O [RFC3672]
subschema O [RFC4512]
subschemaAdminSpecificArea R [RFC3672]
subschemaSubentry A [RFC4512]
subtree O [RFC2293]
subtreeMaximumQuality A 0.9.2342.19200300.100.1.52 [RFC1274]
subtreeMinimumQuality A 0.9.2342.19200300.100.1.51 [RFC1274]
subtreeSpecification A [RFC3672]
supportedAlgorithms A [RFC4523]
supportedApplicationContext A [RFC2256]
supportedControl A [RFC4512]
supportedExtension A [RFC4512]
supportedFeatures A [RFC4512]
supportedLDAPVersion A [RFC4512]
supportedSASLMechanisms A [RFC4512]
surname A [RFC4519]
table O [RFC2293]
tableEntry O [RFC2293]
telephoneNumber A [RFC4519]
telephoneNumberMatch M [RFC4517]
telephoneNumberSubstringsMatch M [RFC4517]
teletexTerminalIdentifier A [RFC4519]
telexNumber A [RFC4519]
textEncodedORAddress A 0.9.2342.19200300.100.1.2 [RFC1274]
textTableEntry O [RFC2293]
textTableKey A [RFC2293]
textTableValue A [RFC2293]
title A [RFC4519]
top O [RFC4512]
uddiAccessPoint A [RFC4403]
uddiAddress O [RFC4403]
uddiAddressLine A [RFC4403]
uddiAddressNameForm N [RFC4403]
uddiAuthorizedName A [RFC4403]
uddiBindingKey A [RFC4403]
uddiBindingTemplate O [RFC4403]
uddiBindingTemplateNameForm N [RFC4403]
uddiBusinessEntity O [RFC4403]
uddiBusinessEntityNameForm N [RFC4403]
uddiBusinessKey A [RFC4403]
uddiBusinessService O [RFC4403]
uddiBusinessServiceNameForm N [RFC4403]
uddiCategoryBag A [RFC4403]
uddiContact O [RFC4403]
uddiContactNameForm N [RFC4403]
uddiDescription A [RFC4403]
uddiDiscoveryURLs A [RFC4403]
uddiEMail A [RFC4403]
uddiFromKey A [RFC4403]
uddiHostingRedirector A [RFC4403]
uddiIdentifierBag A [RFC4403]
uddiInstanceDescription A [RFC4403]
uddiInstanceParms A [RFC4403]
uddiIsHidden A [RFC4403]
uddiIsProjection A [RFC4403]
uddiKeyedReference A [RFC4403]
uddiLang A [RFC4403]
uddiName A [RFC4403]
uddiOperator A [RFC4403]
uddiOverviewDescription A [RFC4403]
uddiOverviewURL A [RFC4403]
uddiPersonName A [RFC4403]
uddiPhone A [RFC4403]
uddiPublisherAssertion O [RFC4403]
uddiPublisherAssertionNameForm N [RFC4403]
uddiServiceKey A [RFC4403]
uddiSortCode A [RFC4403]
uddiTModel O [RFC4403]
uddiTModelInstanceInfo O [RFC4403]
uddiTModelInstanceInfoNameForm N [RFC4403]
uddiTModelKey A [RFC4403]
uddiTModelNameForm N [RFC4403]
uddiToKey A [RFC4403]
uddiUseType A [RFC4403]
uddiUUID A [RFC4403]
uddiv3BindingKey A [RFC4403]
uddiv3BriefResponse A [RFC4403]
uddiv3BusinessKey A [RFC4403]
uddiv3DigitalSignature A [RFC4403]
uddiv3EntityCreationTime A [RFC4403]
uddiv3EntityDeletionTime A [RFC4403]
uddiv3EntityKey A [RFC4403]
uddiv3EntityModificationTime A [RFC4403]
uddiv3EntityObituary O [RFC4403]
uddiv3EntityObituaryNameForm N [RFC4403]
uddiv3ExpiresAfter A [RFC4403]
uddiv3MaxEntities A [RFC4403]
uddiv3NodeId A [RFC4403]
uddiv3NotificationInterval A [RFC4403]
uddiv3ServiceKey A 10.4.32 [RFC4403]
uddiv3Subscription O [RFC4403]
uddiv3SubscriptionFilter A [RFC4403]
uddiv3SubscriptionKey A [RFC4403]
uddiv3SubscriptionNameForm N [RFC4403]
uddiv3TmodelKey A [RFC4403]
uid A 0.9.2342.19200300.100.1.1 [RFC4519]
uidObject O [RFC4519]
uniqueIdentifier A 0.9.2342.19200300.100.1.44 [RFC4524]
uniqueMember A [RFC4519]
uniqueMemberMatch M [RFC4517]
userCertificate A [RFC4523]
userClass A 0.9.2342.19200300.100.1.8 [RFC4524]
userId A 0.9.2342.19200300.100.1.1 [RFC4519]
userPassword A [RFC4519]
userSecurityInformation O [RFC4523]
uuidMatch M [RFC4530]
uuidOrderingMatch M [RFC4530]
version A Reserved for LDIF [RFC2849]
vPIMUser O [RFC4237]
vPIMRfc822Mailbox A [RFC4237]
vPIMTelephoneNumber A [RFC4237]
vPIMSpokenName A [RFC4237]
vPIMSupportedUABehaviors A [RFC4237]
vPIMSupportedAudioMediaTypes A [RFC4237]
vPIMSupportedMessageContext A [RFC4237]
vPIMTextName A [RFC4237]
vPIMExtendedAbsenceStatus A [RFC4237]
vPIMMaxMessageSize A [RFC4237]
vPIMSubMailboxes A [RFC4237]
wordMatch M [RFC4517]
x121Address A [RFC4519]
x400ToRFC822Mapping O [RFC2164]
x500UniqueIdentifier A [RFC4519]

Attribute Description Options

Registration Procedure(s)
x-  Private Use (can not be registered)
e-  Reserved for Experiments, First Come First Served
All others: Standards Action or Expert Review with Specification
Kurt Zeilenga
Available Formats

Option Owner Reference
binary IESG [RFC4522]
lang- (See [1]) IESG [RFC3866]

LDAPMessage types

Registration Procedure(s)
Standards Action
Available Formats

Name Code Owner Reference
bindRequest 0 IESG [RFC4513][RFC4511]
bindResponse 1 IESG [RFC4513][RFC4511]
unbindRequest 2 IESG [RFC4511]
searchRequest 3 IESG [RFC4511]
searchResEntry 4 IESG [RFC4511]
searchResDone 5 IESG [RFC4511]
modifyRequest 6 IESG [RFC4511]
modifyResponse 7 IESG [RFC4511]
addRequest 8 IESG [RFC4511]
addResponse 9 IESG [RFC4511]
delRequest 10 IESG [RFC4511]
delResponse 11 IESG [RFC4511]
modDNRequest 12 IESG [RFC4511]
modDNResponse 13 IESG [RFC4511]
compareRequest 14 IESG [RFC4511]
compareResponse 15 IESG [RFC4511]
abandonRequest 16 IESG [RFC4511]
reserved 17-18 IESG
searchResRef 19 IESG [RFC4511]
reserved 20-22 IESG
extendedReq 23 IESG [RFC4511]
extendedResp 24 IESG [RFC4511]
intermediateResponse 25 IESG [RFC4511]

resultCode values

Registration Procedure(s)
0-1023      Standards Action (can not start with e- or x-)
1024-4095   Expert Review with Specification Required (can not start with e- or x-)
4096-16383  First Come First Served (Shall start with e-)
16384 and higher Private Use (Shall start with x-)
Kurt Zeilenga
Available Formats

Name Code Owner Reference
success 0 IESG [RFC4511]
operationsError 1 IESG [RFC4511]
protocolError 2 IESG [RFC4511]
timeLimitExceeded 3 IESG [RFC4511]
sizeLimitExceeded 4 IESG [RFC4511]
compareFalse 5 IESG [RFC4511]
compareTrue 6 IESG [RFC4511]
authMethodNotSupported 7 IESG [RFC4511]
strongerAuthRequired 8 IESG [RFC4511]
reserved (partialResults) 9 IESG [RFC4511]
referral 10 IESG [RFC4511]
adminLimitExceeded 11 IESG [RFC4511]
unavailableCriticalExtension 12 IESG [RFC4511]
confidentialityRequired 13 IESG [RFC4511]
saslBindInProgress 14 IESG [RFC4511]
noSuchAttribute 16 IESG [RFC4511]
undefinedAttributeType 17 IESG [RFC4511]
inappropriateMatching 18 IESG [RFC4511]
constraintViolation 19 IESG [RFC4511]
attributeOrValueExists 20 IESG [RFC4511]
invalidAttributeSyntax 21 IESG [RFC4511]
noSuchObject 32 IESG [RFC4511]
aliasProblem 33 IESG [RFC4511]
invalidDNSyntax 34 IESG [RFC4511]
reserved (isLeaf) 35 IESG [RFC4511]
aliasDereferencingProblem 36 IESG [RFC4511]
reserved 37-47 IESG
inappropriateAuthentication 48 IESG [RFC4511]
invalidCredentials 49 IESG [RFC4511]
insufficientAccessRights 50 IESG [RFC4511]
busy 51 IESG [RFC4511]
unavailable 52 IESG [RFC4511]
unwillingToPerform 53 IESG [RFC4511]
loopDetect 54 IESG [RFC4511]
reserved 55-63 IESG
namingViolation 64 IESG [RFC4511]
objectClassViolation 65 IESG [RFC4511]
notAllowedOnNonLeaf 66 IESG [RFC4511]
notAllowedOnRDN 67 IESG [RFC4511]
entryAlreadyExists 68 IESG [RFC4511]
objectClassModsProhibited 69 IESG [RFC4511]
reserved (resultsTooLarge) 70 IESG [RFC4511]
reserved 71-79 IESG
other 80 IESG [RFC4511]
reserved (APIs) 81-90 IESG [RFC4511]
reserved (LDAP APIs) 91-112
lcupResourcesExhausted 113 IESG [RFC3928]
lcupSecurityViolation 114 IESG [RFC3928]
lcupInvalidData 115 IESG [RFC3928]
lcupUnsupportedScheme 116 IESG [RFC3928]
lcupReloadRequired 117 IESG [RFC3928]
canceled 118 IESG [RFC3909]
noSuchOperation 119 IESG [RFC3909]
tooLate 120 IESG [RFC3909]
cannotCancel 121 IESG [RFC3909]
assertionFailed 122 IESG [RFC4528]
authorizationDenied 123 WELTMAN [RFC4370]
First Come, First Serve Range 4096-16383
e-syncRefreshRequired 4096 [Kurt_Zeilenga] [Jong_Hyuk_Choi] [RFC4533]

Bind Authentication Method

Registration Procedure(s)
0-1023      Standards Action (can not start with e- or x-)
1024-4095   Expert Review with Specification Required (can not start with e- or x-)
4096-16383  First Come First Served (Shall start with e-)
16384 and higher Private Use (Shall start with x-)
Kurt Zeilenga
Available Formats

Method Value Owner Usage Reference
simple 0 IESG LIMITED USE [RFC4513][RFC4511]
krbv42LDAP 1 IESG OBSOLETE (See [2]) [RFC1777]
krbv42DSA 2 IESG OBSOLETE (See [2]) [RFC1777]
sasl 3 IESG COMMON [RFC4513][RFC4511]

LDAP Syntaxes

Registration Procedure(s)
First Come First Served with Specification Required
Available Formats

Object Identifier Syntax Owner Reference UUID IESG [RFC4530] Attribute Type Description IESG [RFC4517] Bit String IESG [RFC4517] Boolean IESG [RFC4517] Country String IESG [RFC4517] DN IESG [RFC4517] Delivery Method IESG [RFC4517] Directory String IESG [RFC4517] DIT Content Rule Description IESG [RFC4517] DIT Structure Rule Description IESG [RFC4517] Enhanced Guide IESG [RFC4517] Facsimile Telephone Number IESG [RFC4517] Fax IESG [RFC4517] Generalized Time IESG [RFC4517] Guide IESG [RFC4517] IA5 String IESG [RFC4517] Integer IESG [RFC4517] JPEG IESG [RFC4517] Matching Rule Description IESG [RFC4517] Matching Rule Use Description IESG [RFC4517] Name And Optional UID IESG [RFC4517] Name Form Description IESG [RFC4517] Numeric String IESG [RFC4517] Object Class Description IESG [RFC4517] OID IESG [RFC4517] Other Mailbox IESG [RFC4517] Octet String IESG [RFC4517] Postal Address IESG [RFC4517] Printable String IESG [RFC4517] Telephone Number IESG [RFC4517] Teletex Terminal Identifier IESG [RFC4517] Telex Number IESG [RFC4517] UTC Time IESG [RFC4517] LDAP Syntax Description IESG [RFC4517] Substring Assertion IESG [RFC4517]

LDAP Search Scopes

Registration Procedure(s)
0-1023      Standards Action (can not start with e- or x-)
1024-4095   Expert Review with Specification Required (can not start with e- or x-)
4096-16383  First Come First Served (Shall start with e-)
16384 and higher Private Use (Shall start with x-)
Kurt Zeilenga
Available Formats

Name URLString Value Owner Reference
baseObject base 0 IESG [RFC4511][RFC4516]
singleLevel one 1 IESG [RFC4511][RFC4516]
wholeSubtree sub 2 IESG [RFC4511][RFC4516]

LDAP Filter Choices

Registration Procedure(s)
Standards Action
Available Formats

Name Value Owner Reference
and 0 IESG [RFC4511]
or 1 IESG [RFC4511]
not 2 IESG [RFC4511]
equalityMatch 3 IESG [RFC4511]
substrings 4 IESG [RFC4511]
greaterOrEqual 5 IESG [RFC4511]
lessOrEqual 6 IESG [RFC4511]
present 7 IESG [RFC4511]
approxMatch 8 IESG [RFC4511]
extensibleMatch 9 IESG [RFC4511]

LDAP ModifyRequest Operations

Registration Procedure(s)
0-1023      Standards Action (can not start with e- or x-)
1024-4095   Expert Review with Specification Required (can not start with e- or x-)
4096-16383  First Come First Served (Shall start with e-)
16384 and higher Private Use (Shall start with x-)
Kurt Zeilenga
Available Formats

Name Value Owner Reference
add 0 IESG [RFC4511]
delete 1 IESG [RFC4511]
replace 2 IESG [RFC4511]
increment 3 IESG [RFC4525]

LDAP authzid prefixes

Registration Procedure(s)
x- Private Use
e- Reserved for Experiments, First Come First Served
All others, Standards Action or Expert Review with Specification Required
Kurt Zeilenga
Available Formats

Name Prefix Owner Reference
dnAuthzId dn: IESG [RFC4513]
uAuthzId u: IESG [RFC4513]


ID Name Contact URI Last Updated
[Allen_Williams] Allen Williams mailto:allenwilliams& 2009-04-10
[Jong_Hyuk_Choi] Jong Hyuk Choi mailto:jongchoi& 2005-04
[Kurt_Zeilenga] Kurt Zeilenga mailto:Kurt& 2005-04
[Mark_Wahl] Mark Wahl mailto:Mark.Wahl& 2006-11-10
[Matthew_Key] Matthew Key mailto:mkey& 2011-12-05


family of options
These LDAPv2-only mechanisms were deprecated in favor of the LDAPv3 SASL authentication method, specifically the GSSAPI mechanism.