Lightweight Directory Access Protocol (LDAP) Parameters

Last Updated
Available Formats



Plain text

Registries included below

Internet Directory Numbers ( [])

Registration Procedure(s)
Expert Review with Specification Required
Rolf Sonneveld, Andrew Findlay
Directory OIDs are assigned to RFCs for their use in identifying
directory (and possibly other) objects in accordance with BCP 64 [RFC 4520].
The referenced RFC should be consulted for information about
these assignments.
Available Formats

Decimal Name Description Reference
0 Reserved Reserved for future use [IANA]
1 nisSchema Network Info Service Schema [RFC2307]
2 NameForm Naming Plan [RFC2377]
3 AuxObject Auxiliary Object Class [RFC2377]
4 vendorName Vendor Name [RFC3045]
5 vendorVersion Vendor Version [RFC3045]
6 pcimSchema Policy Core Information Model LDAP Schema [RFC3703]
7 LCUP LDAP Client Update Protocol [RFC3928]
8 cancelOp LDAP Cancel Operation [RFC3909]
9 pcelsSchema PCELS Schema [RFC4104]
10 uddi Universal Description, Discovery & Integration [RFC4403]
11 vPIM Voice Messaging Directory Service [RFC4237]
12 assertion Assertion Control [RFC4528]
13 ReadEntry Read Entry Controls [RFC4527]
14 increment LDAP Modify-Increment [RFC4525]
15 x509 x.509 Certificates [RFC4523]
16 uuid entryUUID [RFC4530]
17 LBURP LDAP Bulk Update/Replication Protocol [RFC4373]
18 ASN1 module LDAP ASN.1 Module [RFC4511]
19 turn LDAP Turn Operation [RFC4531]
20 entryDN LDAP entryDN Operational Attribute [RFC5020]
21 txn LDAP Transactions [RFC5805]
22 dontUseCopy LDAP Don't Use Copy Control [RFC6171]

Protocol Mechanisms

Registration Procedure(s)
First Come First Served
C => Control
E => Extension
F => Feature
N => Unsolicited Notice
Available Formats

Object Identifier Type Description Reference
1.2.826.0.1.3344810.2.3 C Matched Values Control [RFC3876]
1.2.840.113556.1.4.319 C LDAP Simple Paged Results Control [RFC2696]
1.2.840.113556.1.4.473 C Sort Request [RFC2891]
1.2.840.113556.1.4.474 C Sort Response [RFC2891] C LCUP Sync Request Control [RFC3928] C LCUP Sync Update Control [RFC3928] C LCUP Sync Done Control [RFC3928] E Cancel Operation [RFC3909] C Assertion Control [RFC4528] C LDAP Pre-read Control [RFC4527] C LDAP Post-read Control [RFC4527] F Modify-Increment [RFC4525] E Start Transaction Extended Request [RFC5805] C Transaction Specification Control [RFC5805] E End Transaction Extended Request [RFC5805] N Aborted Transaction Notice [RFC5805] E Dynamic Refresh [RFC2589] E StartTLS [RFC4511][RFC4513] F All Op Attrs [RFC3673] F OC AD Lists [RFC4529] F True/False filters [RFC4526] F Language Tag Options [RFC3866] F Language Range Options [RFC3866] C LDAP Content Synchronization Control [RFC4533] C Subentries [RFC3672] E Modify Password [RFC3062] E Who am I? [RFC4532] E StartLBURPRequest LDAP ExtendedRequest message [RFC4373] E StartLBURPResponse LDAP ExtendedResponse message [RFC4373] E EndLBURPRequest LDAP ExtendedRequest message [RFC4373] E EndLBURPResponse LDAP ExtendedResponse message [RFC4373] E LBURPUpdateRequest LDAP ExtendedRequest message [RFC4373] E LBURPUpdateResponse LDAP ExtendedResponse message [RFC4373] F LBURP Incremental Update style OID [RFC4373] E LDAP Turn Operation [RFC4531]
2.16.840.1.113730.3.4.2 C ManageDsaIT [RFC3296]
2.16.840.1.113730.3.4.15 C Authorization Identity Response Control [RFC3829]
2.16.840.1.113730.3.4.16 C Authorization Identity Request Control [RFC3829]
2.16.840.1.113730.3.4.18 C Proxy Authorization Control [RFC4370] C LDAP Don't Use Copy Control [RFC6171]

Object Identifier Descriptors

Registration Procedure(s)
x-  Private Use (can not be registered)
e-  Reserved for Experiments, First Come First Served
All others:  Expert Review
Rolf Sonneveld, Andrew Findlay
A => Attribute Type
C => DIT Content Rule
E => LDAP URL Extension
F => Family
M => Matching Rule
N => Name Form
O => Object Class
R => Administrative Role
* => The registration is historic in nature
Available Formats

Name Type OID Reference
accessControlInnerArea R [RFC3672]
accessControlSpecificArea R [RFC3672]
account O 0.9.2342.19200300.100.4.5 [RFC4524]
add A Reserved for LDIF [RFC2849]
administrativeRole A [RFC3672]
administratorsAddress A [Mark_Wahl]
algorithmIdentifierMatch M [RFC4523]
alias O [RFC4512]
aliasedEntryName A [X.501]
aliasedObjectName A [RFC4512]
allComponentsMatch M [RFC3687]
altServer A [RFC4512]
applicationEntity O [RFC2256]
applicationProcess O [RFC4519]
aRecord A 0.9.2342.19200300.100.1.26 [RFC1274]
associatedDomain A 0.9.2342.19200300.100.1.37 [RFC4524]
associatedInternetGateway A [RFC2164]
associatedName A 0.9.2342.19200300.100.1.38 [RFC4524]
associatedORAddress A [RFC2164]
associatedX400Gateway A [RFC2164]
attributeMap A [RFC4876]
attributeTypes A [RFC4512]
audio A 0.9.2342.19200300.100.1.55 [RFC1274]
authenticationMethod A [RFC4876]
authorityRevocationList A [RFC4523]
autonomousArea R [RFC3672]
bindTimeLimit A [RFC4876]
bitStringMatch M [RFC4517]
booleanMatch M [RFC4517]
buildingName A 0.9.2342.19200300.100.1.48 [RFC4524]
businessCategory A [RFC4519]
c A [RFC4519]
c-FacsimileTelephoneNumber A [RFC3671]
c-InternationalISDNNumber A [RFC3671]
c-l A [RFC3671]
c-PhysicalDeliveryOffice A [RFC3671]
c-PostalAddress A [RFC3671]
c-PostalCode A [RFC3671]
c-PostOfficeBox A [RFC3671]
c-o A [RFC3671]
c-ou A [RFC3671]
c-st A [RFC3671]
c-street A [RFC3671]
c-TelephoneNumber A [RFC3671]
c-TelexNumber A [RFC3671]
cACertificate A [RFC4523]
calCalAdrURI A 1.2.840.113556.1.4.481 [RFC2739]
calCalURI A 1.2.840.113556.1.4.478 [RFC2739]
calCAPURI A 1.2.840.113556.1.4.480 [RFC2739]
calEntry O 1.2.840.113556.1.5.87 [RFC2739]
calFBURL A 1.2.840.113556.1.4.479 [RFC2739]
calOtherCalAdrURIs A 1.2.840.113556.1.4.485 [RFC2739]
calOtherCalURIs A 1.2.840.113556.1.4.482 [RFC2739]
calOtherCAPURIs A 1.2.840.113556.1.4.484 [RFC2739]
calOtherFBURLs A 1.2.840.113556.1.4.483 [RFC2739]
caseExactIA5Match M [RFC4517]
caseExactMatch M [RFC4517]
caseExactOrderingMatch M [RFC4517]
caseExactSubstringsMatch M [RFC4517]
caseIgnoreIA5Match M [RFC4517]
caseIgnoreIA5SubstringsMatch M [RFC4517]
caseIgnoreListMatch M [RFC4517]
caseIgnoreListSubstringsMatch M [RFC4517]
caseIgnoreMatch M [RFC4517]
caseIgnoreOrderingMatch M [RFC4517]
caseIgnoreSubstringsMatch M [RFC4517]
certificateExactMatch M [RFC4523]
certificateListExactMatch M [RFC4523]
certificateListMatch M [RFC4523]
certificateMatch M [RFC4523]
certificatePairExactMatch M [RFC4523]
certificatePairMatch M [RFC4523]
certificateRevocationList A [RFC4523]
certificationAuthority O [RFC4523]
certificationAuthority-V2 O [RFC4523]
changetype A Reserved for LDIF [RFC2849]
cn A [RFC4519]
cNAMERecord A 0.9.2342.19200300.100.1.31 [RFC1274]
co A 0.9.2342.19200300.100.1.43 [RFC4524]
collectiveAttributeInnerArea R [RFC3672]
collectiveAttributeSpecificArea R [RFC3672]
collectiveAttributeSubentries A [RFC3671]
collectiveAttributeSubentry O [RFC3671]
collectiveExclusions A [RFC3671]
commonName A [RFC4519]
componentFilterMatch M [RFC3687]
control A Reserved for LDIF [RFC2849]
country O [RFC4519]
countryName A [RFC4519]
createTimestamp A [RFC4512]
creatorsName A [RFC4512]
credentialLevel A [RFC4876]
cRLDistributionPoint O [RFC4523]
crossCertificatePair A [RFC4523]
DC A 0.9.2342.19200300.100.1.25 [RFC4519]
dcObject O [RFC4519]
defaultServerList A [RFC4876]
defaultSearchBase A [RFC4876]
defaultSearchScope A [RFC4876]
delete A Reserved for LDIF [RFC2849]
deleteoldrdn A Reserved for LDIF [RFC2849]
deltaCRL O [RFC4523]
deltaRevocationList A [RFC4523]
dereferenceAliases A [RFC4876]
description A [RFC4519]
destinationIndicator A [RFC4519]
device O [RFC4519]
directoryComponentsMatch M [RFC3687]
directoryStringFirstComponentMatch M [RFC4517]
distinguishedName A [RFC4519]
distinguishedNameMatch M [RFC4517]
distinguishedNameTableEntry O [RFC2293]
distinguishedNameTableKey A [RFC2293]
dITContentRules A [RFC4512]
dITRedirect A 0.9.2342.19200300.100.1.54 [RFC1274]
dITStructureRules A [RFC4512]
dmd O [RFC2256]
dmdName A [RFC2256]
dn A Reserved for LDIF [RFC2849]
dnQualifier A [RFC4519]
dNSDomain O 0.9.2342.19200300.100.4.15 [RFC1274]
document O 0.9.2342.19200300.100.4.6 [RFC4524]
documentAuthor A 0.9.2342.19200300.100.1.14 [RFC4524]
documentIdentifier A 0.9.2342.19200300.100.1.11 [RFC4524]
documentLocation A 0.9.2342.19200300.100.1.15 [RFC4524]
documentPublisher A 0.9.2342.19200300.100.1.56 [RFC4524]
documentSeries O 0.9.2342.19200300.100.4.8 [RFC4524]
documentTitle A 0.9.2342.19200300.100.1.12 [RFC4524]
documentVersion A 0.9.2342.19200300.100.1.13 [RFC4524]
domain O 0.9.2342.19200300.100.4.13 [RFC4524]
domainComponent A 0.9.2342.19200300.100.1.25 [RFC4519]
domainNameForm N [RFC2247]
domainRelatedObject O 0.9.2342.19200300.100.4.17 [RFC4524]
drink A 0.9.2342.19200300.100.1.5 [RFC4524]
dSA O [RFC2256]
dSAQuality A 0.9.2342.19200300.100.1.49 [RFC1274]
DUAConfigProfile O [RFC4876]
dynamicObject O [RFC2589]
dynamicSubtrees A [RFC2589]
e-com-seafreeze-* F N/A [Allen_Williams]
e-com-westjet-* F N/A [Matthew_Key]
email A 1.2.840.113549.1.9.1 [RFC3280]
emailAddress A 1.2.840.113549.1.9.1 [RFC3280]
enhancedSearchGuide A [RFC4519]
entryDN A [RFC5020]
entryTtl A [RFC2589]
entryUUID A [RFC4530]
extensibleObject O [RFC4512]
facsimileTelephoneNumber A [RFC4519]
favouriteDrink A* 0.9.2342.19200300.100.1.5 [RFC4524]
fedfsAnnotation A [RFC7532]
fedfsDescr A [RFC7532]
fedfsFsl O [RFC7532]
fedfsFslHost A* [RFC7532]
fedfsFslPort A* [RFC7532]
fedfsFslTTL A* [RFC7532]
fedfsFslUuid A [RFC7532]
fedfsFsn O [RFC7532]
fedfsFsnTTL A [RFC7532]
fedfsFsnUuid A [RFC7532]
fedfsNceDN A [RFC7532]
fedfsNcePrefix A* [RFC7532]
fedfsNetAddr A* [RFC7532]
fedfsNetPort A* [RFC7532]
fedfsNfsClassChange A [RFC7532]
fedfsNfsClassFileid A [RFC7532]
fedfsNfsClassHandle A [RFC7532]
fedfsNfsClassReaddir A [RFC7532]
fedfsNfsClassSimul A [RFC7532]
fedfsNfsClassWritever A [RFC7532]
fedfsNfsCurrency A [RFC7532]
fedfsNfsFsl O [RFC7532]
fedfsNfsGenFlagGoing A [RFC7532]
fedfsNfsGenFlagSplit A [RFC7532]
fedfsNfsGenFlagWritable A [RFC7532]
fedfsNfsMajorVer A* [RFC7532]
fedfsNfsMinorVer A* [RFC7532]
fedfsNfsPath A* [RFC7532]
fedfsNfsReadOrder A [RFC7532]
fedfsNfsReadRank A [RFC7532]
fedfsNfsTransFlagRdma A [RFC7532]
fedfsNfsURI A [RFC7532]
fedfsNfsValidFor A [RFC7532]
fedfsNfsVarSub A [RFC7532]
fedfsNfsWriteOrder A [RFC7532]
fedfsNfsWriteRank A [RFC7532]
fedfsNsdbContainerInfo O [RFC7532]
fedfsNsdbName A* [RFC7532]
fedfsNsdbPort A* [RFC7532]
fedfsUuid A [RFC7532]
followReferrals A [RFC4876]
friendlyCountry O 0.9.2342.19200300.100.4.18 [RFC4524]
friendlyCountryName A* 0.9.2342.19200300.100.1.43 [RFC4524]
generalizedTimeMatch M [RFC4517]
generalizedTimeOrderingMatch M [RFC4517]
generationQualifier A [RFC4519]
givenName A [RFC4519]
governingStructureRule A [RFC4512]
groupOfNames O [RFC4519]
groupOfUniqueNames O [RFC4519]
homePhone A 0.9.2342.19200300.100.1.20 [RFC4524]
homePostalAddress A 0.9.2342.19200300.100.1.39 [RFC4524]
homeTelephone A* 0.9.2342.19200300.100.1.20 [RFC4524]
host A 0.9.2342.19200300.100.1.9 [RFC4524]
houseIdentifier A [RFC4519]
increment A Reserved for LDIF [RFC4525]
info A 0.9.2342.19200300.100.1.4 [RFC4524]
initials A [RFC4519]
integerFirstComponentMatch M [RFC4517]
integerMatch M [RFC4517]
integerOrderingMatch M [RFC4517]
internationaliSDNNumber A [RFC4519]
janetMailbox A 0.9.2342.19200300.100.1.46 [RFC1274]
jpegPhoto A 0.9.2342.19200300.100.1.60 [RFC2798]
keywordMatch M [RFC4517]
knowledgeInformation A [RFC2256]
L A [RFC4519]
labeledURI A [RFC2079]
labeledURIObject O [RFC2079]
lastModifiedBy A 0.9.2342.19200300.100.1.24 [RFC1274]
lastModifiedTime A 0.9.2342.19200300.100.1.23 [RFC1274]
ldapSyntaxes A [RFC4512]
LDIFLocationURL A [RFC6109]
LDIFLocationURLObject O [RFC6109]
locality O [RFC4519]
localityName A [RFC4519]
mail A 0.9.2342.19200300.100.1.3 [RFC4524]
mailPreferenceOption A 0.9.2342.19200300.100.1.47 [RFC1274]
mailReceipt A [RFC6109]
manager A 0.9.2342.19200300.100.1.10 [RFC4524]
managedDomains A [RFC6109]
matchingRules A [RFC4512]
matchingRuleUse A [RFC4512]
mcgamTables A [RFC2164]
mDRecord A 0.9.2342.19200300.100.1.27 [RFC1274]
member A [RFC4519]
mixerGateway O [RFC2164]
mobile A 0.9.2342.19200300.100.1.41 [RFC4524]
mobileTelephoneNumber A* 0.9.2342.19200300.100.1.41 [RFC4524]
moddn A Reserved for LDIF [RFC2849]
modifiersName A [RFC4512]
modify A Reserved for LDIF [RFC2849]
modrdn A Reserved for LDIF [RFC2849]
modifyTimestamp A [RFC4512]
mXRecord A 0.9.2342.19200300.100.1.28 [RFC1274]
name A [RFC4519]
nameForms A [RFC4512]
namingContexts A [RFC4512]
newrdn A Reserved for LDIF [RFC2849]
newsuperior A Reserved for LDIF [RFC2849]
nSRecord A 0.9.2342.19200300.100.1.29 [RFC1274]
numericStringMatch M [RFC4517]
numericStringOrderingMatch M [RFC4517]
numericStringSubstringsMatch M [RFC4517]
o A [RFC4519]
objectClass A [RFC4512]
objectClasses A [RFC4512]
objectclassMap A [RFC4876]
objectIdentifierFirstComponentMatch M [RFC4517]
objectIdentifierMatch M [RFC4517]
octetStringMatch M [RFC4517]
octetStringOrderingMatch M [RFC4517]
omittedORAddressComponent O [RFC2164]
oRAddressComponentType A [RFC2164]
organization O [RFC4519]
organizationalPerson O [RFC4519]
organizationalRole O [RFC4519]
organizationalStatus A 0.9.2342.19200300.100.1.45 [RFC4524]
organizationalUnit O [RFC4519]
organizationalUnitName A [RFC4519]
organizationName A [RFC4519]
otherMailbox A 0.9.2342.19200300.100.1.22 [RFC1274]
ou A [RFC4519]
owner A [RFC4519]
pager A 0.9.2342.19200300.100.1.42 [RFC4524]
pagerTelephoneNumber A* 0.9.2342.19200300.100.1.42 [RFC4524]
pcels8021Filter O [RFC4104]
pcels8021HdrDestMACAddress A [RFC4104]
pcels8021HdrDestMACMask A [RFC4104]
pcels8021HdrPriority A [RFC4104]
pcels8021HdrProtocolID A [RFC4104]
pcels8021HdrSourceMACAddress A [RFC4104]
pcels8021HdrSourceMACMask A [RFC4104]
pcels8021HdrVLANID A [RFC4104]
pcelsActionAssociation O [RFC4104]
pcelsActionList A [RFC4104]
pcelsBitStringList A [RFC4104]
pcelsBitStringValueAuxClass O [RFC4104]
pcelsBoolean A [RFC4104]
pcelsBooleanValueAuxClass O [RFC4104]
pcelsCompoundActionAuxClass O [RFC4104]
pcelsCompoundConditionAuxClass O [RFC4104]
pcelsCompoundFilterConditionAuxClass O [RFC4104]
pcelsConditionAssociation O [RFC4104]
pcelsConditionList A [RFC4104]
pcelsConditionListType A [RFC4104]
pcelsCoSVariableAuxClass O [RFC4104]
pcelsDecisionStrategy A [RFC4104]
pcelsDestinationIPv4VariableAuxClass O [RFC4104]
pcelsDestinationIPv6VariableAuxClass O [RFC4104]
pcelsDestinationMACVariableAuxClass O [RFC4104]
pcelsDestinationPortVariableAuxClass O [RFC4104]
pcelsDestinationSAPVariableAuxClass O [RFC4104]
pcelsDSCPVariableAuxClass O [RFC4104]
pcelsElementList A [RFC4104]
pcelsEthertypeVariableAuxClass O [RFC4104]
pcelsExecutionStrategy A [RFC4104]
pcelsExpectedValueList A [RFC4104]
pcelsExpectedValueTypes A [RFC4104]
pcelsExplicitVariableAuxClass O [RFC4104]
pcelsFilterDirection A [RFC4104]
pcelsFilterEntryBase O [RFC4104]
pcelsFilterEntryList A [RFC4104]
pcelsFilterIsNegated A [RFC4104]
pcelsFilterListAuxClass O [RFC4104]
pcelsFilterListName A [RFC4104]
pcelsFilterName A [RFC4104]
pcelsFlowDirectionVariableAuxClass O [RFC4104]
pcelsFlowIdVariableAuxClass O [RFC4104]
pcelsGroup O [RFC4104]
pcelsGroupAuxClass O [RFC4104]
pcelsGroupInstance O [RFC4104]
pcelsImplicitVariableAuxClass O [RFC4104]
pcelsIntegerList A [RFC4104]
pcelsIntegerValueAuxClass O [RFC4104]
pcelsIPHdrDestAddress A [RFC4104]
pcelsIPHdrDestAddressEndOfRange A [RFC4104]
pcelsIPHdrDestMask A [RFC4104]
pcelsIPHdrDestPortEnd A [RFC4104]
pcelsIPHdrDestPortStart A [RFC4104]
pcelsIPHdrDSCPList A [RFC4104]
pcelsIPHdrFlowLabel A [RFC4104]
pcelsIPHdrProtocolID A [RFC4104]
pcelsIPHdrSourceAddress A [RFC4104]
pcelsIPHdrSourceAddressEndOfRange A [RFC4104]
pcelsIPHdrSourceMask A [RFC4104]
pcelsIPHdrSourcePortEnd A [RFC4104]
pcelsIPHdrSourcePortStart A [RFC4104]
pcelsIPHdrVersion A [RFC4104]
pcelsIPHeadersFilter O [RFC4104]
pcelsIPProtocolVariableAuxClass O [RFC4104]
pcelsIPToSVariableAuxClass O [RFC4104]
pcelsIPv4AddrList A [RFC4104]
pcelsIPv4AddrValueAuxClass O [RFC4104]
pcelsIPv6AddrList A [RFC4104]
pcelsIPv6AddrValueAuxClass O [RFC4104]
pcelsIPVersionVariableAuxClass O [RFC4104]
pcelsIsMirrored A [RFC4104]
pcelsMACAddrList A [RFC4104]
pcelsMACAddrValueAuxClass O [RFC4104]
pcelsPolicySet O [RFC4104]
pcelsPolicySetAssociation O [RFC4104]
pcelsPolicySetDN A [RFC4104]
pcelsPolicySetList A [RFC4104]
pcelsPolicySetName A [RFC4104]
pcelsPriority A [RFC4104]
pcelsReusableContainer O [RFC4104]
pcelsReusableContainerAuxClass O [RFC4104]
pcelsReusableContainerInstance O [RFC4104]
pcelsReusableContainerList A [RFC4104]
pcelsReusableContainerName A [RFC4104]
pcelsRole A [RFC4104]
pcelsRoleCollection O [RFC4104]
pcelsRoleCollectionName A [RFC4104]
pcelsRule O [RFC4104]
pcelsRuleAuxClass O [RFC4104]
pcelsRuleInstance O [RFC4104]
pcelsRuleValidityPeriodList A [RFC4104]
pcelsSequencedActions A [RFC4104]
pcelsSimpleActionAuxClass O [RFC4104]
pcelsSimpleConditionAuxClass O [RFC4104]
pcelsSNAPOUIVariableAuxClass O [RFC4104]
pcelsSNAPTypeVariableAuxClass O [RFC4104]
pcelsSourceIPv4VariableAuxClass O [RFC4104]
pcelsSourceIPv6VariableAuxClass O [RFC4104]
pcelsSourceMACVariableAuxClass O [RFC4104]
pcelsSourcePortVariableAuxClass O [RFC4104]
pcelsSourceSAPVariableAuxClass O [RFC4104]
pcelsStringList A [RFC4104]
pcelsStringValueAuxClass O [RFC4104]
pcelsValueAuxClass O [RFC4104]
pcelsValueDN A [RFC4104]
pcelsValueName A [RFC4104]
pcelsVariable O [RFC4104]
pcelsVariableDN A [RFC4104]
pcelsVariableModelClass A [RFC4104]
pcelsVariableModelProperty A [RFC4104]
pcelsVariableName A [RFC4104]
pcelsVendorValueAuxClass O [RFC4104]
pcelsVendorValueData A [RFC4104]
pcelsVendorValueEncoding A [RFC4104]
pcelsVendorVariableAuxClass O [RFC4104]
pcelsVendorVariableData A [RFC4104]
pcelsVendorVariableEncoding A [RFC4104]
pcelsVLANVariableAuxClass O [RFC4104]
pcimPolicy O [RFC3703]
pcimGroup O [RFC3703]
pcimGroupAuxClass O [RFC3703]
pcimGroupInstance O [RFC3703]
pcimRule O [RFC3703]
pcimRuleAuxClass O [RFC3703]
pcimRuleInstance O [RFC3703]
pcimRuleConditionAssociation O [RFC3703]
pcimRuleValidityAssociation O [RFC3703]
pcimRuleActionAssociation O [RFC3703]
pcimConditionAuxClass O [RFC3703]
pcimTPCAuxClass O [RFC3703]
pcimConditionVendorAuxClass O [RFC3703]
pcimActionAuxClass O [RFC3703]
pcimActionVendorAuxClass O [RFC3703]
pcimPolicyInstance O [RFC3703]
pcimElementAuxClass O [RFC3703]
pcimRepository O [RFC3703]
pcimRepositoryAuxClass O [RFC3703]
pcimRepositoryInstance O [RFC3703]
pcimSubtreesPtrAuxClass O [RFC3703]
pcimGroupContainmentAuxClass O [RFC3703]
pcimRuleContainmentAuxClass O [RFC3703]
pcimKeywords A [RFC3703]
pcimGroupName A [RFC3703]
pcimRuleName A [RFC3703]
pcimRuleEnabled A [RFC3703]
pcimRuleConditionListType A [RFC3703]
pcimRuleConditionList A [RFC3703]
pcimRuleActionList A [RFC3703]
pcimRuleValidityPeriodList A [RFC3703]
pcimRuleUsage A [RFC3703]
pcimRulePriority A [RFC3703]
pcimRuleMandatory A [RFC3703]
pcimRuleSequencedActions A [RFC3703]
pcimRoles A [RFC3703]
pcimConditionGroupNumber A [RFC3703]
pcimConditionNegated A [RFC3703]
pcimConditionName A [RFC3703]
pcimConditionDN A [RFC3703]
pcimValidityConditionName A [RFC3703]
pcimTimePeriodConditionDN A [RFC3703]
pcimActionName A [RFC3703]
pcimActionOrder A [RFC3703]
pcimActionDN A [RFC3703]
pcimTPCTime A [RFC3703]
pcimTPCMonthOfYearMask A [RFC3703]
pcimTPCDayOfMonthMask A [RFC3703]
pcimTPCDayOfWeekMask A [RFC3703]
pcimTPCTimeOfDayMask A [RFC3703]
pcimTPCLocalOrUtcTime A [RFC3703]
pcimVendorConstraintData A [RFC3703]
pcimVendorConstraintEncoding A [RFC3703]
pcimVendorActionData A [RFC3703]
pcimVendorActionEncoding A [RFC3703]
pcimPolicyInstanceName A [RFC3703]
pcimRepositoryName A [RFC3703]
pcimSubtreesAuxContainedSet A [RFC3703]
pcimGroupsAuxContainedSet A [RFC3703]
pcimRulesAuxContainedSet A [RFC3703]
person O [RFC4519]
personalSignature A 0.9.2342.19200300.100.1.53 [RFC1274]
personalTitle A 0.9.2342.19200300.100.1.40 [RFC4524]
photo A 0.9.2342.19200300.100.1.7 [RFC1274]
physicalDeliveryOfficeName A [RFC4519]
pilotDSA O 0.9.2342.19200300.100.4.21 [RFC1274]
pilotObject O 0.9.2342.19200300.100.4.3 [RFC1274]
pilotOrganization O 0.9.2342.19200300.100.4.20 [RFC1274]
pilotPerson O 0.9.2342.19200300.100.4.4 [RFC1274]
pkiCA O [RFC4523]
pkiUser O [RFC4523]
postalAddress A [RFC4519]
postalCode A [RFC4519]
postOfficeBox A [RFC4519]
preferredDeliveryMethod A [RFC4519]
preferredServerList A [RFC4876]
presentationAddress A [RFC2256]
presentationAddressMatch M [RFC2252]
presentMatch M [RFC3687]
printer-aliases A [RFC3712]
printer-charge-info A [RFC-mcdonald-ldap-printer-schema-12]
printer-charge-info-uri A [RFC-mcdonald-ldap-printer-schema-12]
printer-charset-configured A [RFC3712]
printer-charset-supported A [RFC3712]
printer-color-supported A [RFC3712]
printer-compression-supported A [RFC3712]
printer-copies-supported A [RFC3712]
printer-current-operator A [RFC3712]
printer-delivery-orientation-supported A [RFC3712]
printer-device-id A [RFC-mcdonald-ldap-printer-schema-12]
printer-device-service-count A [RFC-mcdonald-ldap-printer-schema-12]
printer-document-format-supported A [RFC3712]
printer-finishings-supported A [RFC3712]
printer-generated-natural-language-supported A [RFC3712]
printer-geo-location A [RFC-mcdonald-ldap-printer-schema-12]
printer-info A [RFC3712]
printer-ipp-features-supported A [RFC-mcdonald-ldap-printer-schema-12]
printer-ipp-versions-supported A [RFC3712]
printer-job-priority-supported A [RFC3712]
printer-job-k-octets-supported A [RFC3712]
printer-location A [RFC3712]
printer-make-and-model A [RFC3712]
printer-media-local-supported A [RFC3712]
printer-media-supported A [RFC3712]
printer-more-info A [RFC3712]
printer-multiple-document-jobs-supported A [RFC3712]
printer-name A [RFC3712]
printer-natural-language-configured A [RFC3712]
printer-number-up-supported A [RFC3712]
printer-output-features-supported A [RFC3712]
printer-pages-per-minute A [RFC3712]
printer-pages-per-minute-color A [RFC3712]
printer-print-quality-supported A [RFC3712]
printer-resolution-supported A [RFC3712]
printer-service-person A [RFC3712]
printer-sides-supported A [RFC3712]
printer-stacking-order-supported A [RFC3712]
printer-uri A [RFC3712]
printer-uuid A [RFC-mcdonald-ldap-printer-schema-12]
printer-xri-supported A [RFC3712]
printerAbstract O [RFC3712]
printerIPP O [RFC3712]
printerLPR O [RFC3712]
printerService O [RFC3712]
printerServiceAuxClass O [RFC3712]
profileTTL A [RFC4876]
protocolInformation A [RFC2256]
protocolInformationMatch M [RFC2252]
provider O [RFC6109]
providerCertificate A [RFC6109]
providerCertificateHash A [RFC6109]
providerName A [RFC6109]
providerUnit A [RFC6109]
pseudonym A [RFC3280]
qualityLabelledData O 0.9.2342.19200300.100.4.22 [RFC1274]
rdnMatch M [RFC3687]
ref A 2.16.840.1.113730.3.1.34 [RFC3296]
referral 0 2.16.840.1.113730.3.2.6 [RFC3296]
registeredAddress A [RFC4519]
replace A Reserved for LDIF [RFC2849]
residentialPerson O [RFC4519]
RFC822LocalPart O 0.9.2342.19200300.100.4.14 [RFC4524]
RFC822Mailbox A* 0.9.2342.19200300.100.1.3 [RFC4524]
rFC822ToX400Mapping O [RFC2164]
roleOccupant A [RFC4519]
room O 0.9.2342.19200300.100.4.7 [RFC4524]
roomNumber A 0.9.2342.19200300.100.1.6 [RFC4524]
searchGuide A [RFC4519]
searchTimeLimit A [RFC4876]
secretary A 0.9.2342.19200300.100.1.21 [RFC4524]
seeAlso A [RFC4519]
serialNumber A [RFC4519]
serviceAuthenticationMethod A [RFC4876]
serviceCredentialLevel A [RFC4876]
serviceSearchDescriptor A [RFC4876]
simpleSecurityObject O 0.9.2342.19200300.100.4.19 [RFC4524]
singleLevelQuality A 0.9.2342.19200300.100.1.50 [RFC4524]
slpServicePrinter O [RFC3712]
sn A [RFC4519]
sOARecord A 0.9.2342.19200300.100.1.30 [RFC1274]
st A [RFC4519]
stateOrProvinceName A [RFC2256]
storedPrefixMatch M [RFC3698]
street A [RFC4519]
streetAddress A [RFC2256]
strongAuthenticationUser O [RFC4523]
structuralObjectClass A [RFC4512]
subentry O [RFC3672]
subschema O [RFC4512]
subschemaAdminSpecificArea R [RFC3672]
subschemaSubentry A [RFC4512]
subtree O [RFC2293]
subtreeMaximumQuality A 0.9.2342.19200300.100.1.52 [RFC1274]
subtreeMinimumQuality A 0.9.2342.19200300.100.1.51 [RFC1274]
subtreeSpecification A [RFC3672]
supportedAlgorithms A [RFC4523]
supportedApplicationContext A [RFC2256]
supportedControl A [RFC4512]
supportedExtension A [RFC4512]
supportedFeatures A [RFC4512]
supportedLDAPVersion A [RFC4512]
supportedSASLMechanisms A [RFC4512]
surname A [RFC4519]
table O [RFC2293]
tableEntry O [RFC2293]
telephoneNumber A [RFC4519]
telephoneNumberMatch M [RFC4517]
telephoneNumberSubstringsMatch M [RFC4517]
teletexTerminalIdentifier A [RFC4519]
telexNumber A [RFC4519]
textEncodedORAddress A 0.9.2342.19200300.100.1.2 [RFC1274]
textTableEntry O [RFC2293]
textTableKey A [RFC2293]
textTableValue A [RFC2293]
title A [RFC4519]
top O [RFC4512]
uddiAccessPoint A [RFC4403]
uddiAddress O [RFC4403]
uddiAddressLine A [RFC4403]
uddiAddressNameForm N [RFC4403]
uddiAuthorizedName A [RFC4403]
uddiBindingKey A [RFC4403]
uddiBindingTemplate O [RFC4403]
uddiBindingTemplateNameForm N [RFC4403]
uddiBusinessEntity O [RFC4403]
uddiBusinessEntityNameForm N [RFC4403]
uddiBusinessKey A [RFC4403]
uddiBusinessService O [RFC4403]
uddiBusinessServiceNameForm N [RFC4403]
uddiCategoryBag A [RFC4403]
uddiContact O [RFC4403]
uddiContactNameForm N [RFC4403]
uddiDescription A [RFC4403]
uddiDiscoveryURLs A [RFC4403]
uddiEMail A [RFC4403]
uddiFromKey A [RFC4403]
uddiHostingRedirector A [RFC4403]
uddiIdentifierBag A [RFC4403]
uddiInstanceDescription A [RFC4403]
uddiInstanceParms A [RFC4403]
uddiIsHidden A [RFC4403]
uddiIsProjection A [RFC4403]
uddiKeyedReference A [RFC4403]
uddiLang A [RFC4403]
uddiName A [RFC4403]
uddiOperator A [RFC4403]
uddiOverviewDescription A [RFC4403]
uddiOverviewURL A [RFC4403]
uddiPersonName A [RFC4403]
uddiPhone A [RFC4403]
uddiPublisherAssertion O [RFC4403]
uddiPublisherAssertionNameForm N [RFC4403]
uddiServiceKey A [RFC4403]
uddiSortCode A [RFC4403]
uddiTModel O [RFC4403]
uddiTModelInstanceInfo O [RFC4403]
uddiTModelInstanceInfoNameForm N [RFC4403]
uddiTModelKey A [RFC4403]
uddiTModelNameForm N [RFC4403]
uddiToKey A [RFC4403]
uddiUseType A [RFC4403]
uddiUUID A [RFC4403]
uddiv3BindingKey A [RFC4403]
uddiv3BriefResponse A [RFC4403]
uddiv3BusinessKey A [RFC4403]
uddiv3DigitalSignature A [RFC4403]
uddiv3EntityCreationTime A [RFC4403]
uddiv3EntityDeletionTime A [RFC4403]
uddiv3EntityKey A [RFC4403]
uddiv3EntityModificationTime A [RFC4403]
uddiv3EntityObituary O [RFC4403]
uddiv3EntityObituaryNameForm N [RFC4403]
uddiv3ExpiresAfter A [RFC4403]
uddiv3MaxEntities A [RFC4403]
uddiv3NodeId A [RFC4403]
uddiv3NotificationInterval A [RFC4403]
uddiv3ServiceKey A 10.4.32 [RFC4403]
uddiv3Subscription O [RFC4403]
uddiv3SubscriptionFilter A [RFC4403]
uddiv3SubscriptionKey A [RFC4403]
uddiv3SubscriptionNameForm N [RFC4403]
uddiv3TmodelKey A [RFC4403]
uid A 0.9.2342.19200300.100.1.1 [RFC4519]
uidObject O [RFC4519]
uniqueIdentifier A 0.9.2342.19200300.100.1.44 [RFC4524]
uniqueMember A [RFC4519]
uniqueMemberMatch M [RFC4517]
userCertificate A [RFC4523]
userClass A 0.9.2342.19200300.100.1.8 [RFC4524]
userId A 0.9.2342.19200300.100.1.1 [RFC4519]
userPassword A [RFC4519]
userSecurityInformation O [RFC4523]
uuidMatch M [RFC4530]
uuidOrderingMatch M [RFC4530]
version A Reserved for LDIF [RFC2849]
vPIMUser O [RFC4237]
vPIMRfc822Mailbox A [RFC4237]
vPIMTelephoneNumber A [RFC4237]
vPIMSpokenName A [RFC4237]
vPIMSupportedUABehaviors A [RFC4237]
vPIMSupportedAudioMediaTypes A [RFC4237]
vPIMSupportedMessageContext A [RFC4237]
vPIMTextName A [RFC4237]
vPIMExtendedAbsenceStatus A [RFC4237]
vPIMMaxMessageSize A [RFC4237]
vPIMSubMailboxes A [RFC4237]
wordMatch M [RFC4517]
x121Address A [RFC4519]
x400ToRFC822Mapping O [RFC2164]
x500UniqueIdentifier A [RFC4519]

Attribute Description Options

Registration Procedure(s)
x-  Private Use (can not be registered)
e-  Reserved for Experiments, First Come First Served
All others: Standards Action or Expert Review with Specification
Rolf Sonneveld, Andrew Findlay
Available Formats

Option Owner Reference
binary IESG [RFC4522]
lang- (See [1]) IESG [RFC3866]

LDAPMessage types

Registration Procedure(s)
Standards Action
Available Formats

Name Code Owner Reference
bindRequest 0 IESG [RFC4513][RFC4511]
bindResponse 1 IESG [RFC4513][RFC4511]
unbindRequest 2 IESG [RFC4511]
searchRequest 3 IESG [RFC4511]
searchResEntry 4 IESG [RFC4511]
searchResDone 5 IESG [RFC4511]
modifyRequest 6 IESG [RFC4511]
modifyResponse 7 IESG [RFC4511]
addRequest 8 IESG [RFC4511]
addResponse 9 IESG [RFC4511]
delRequest 10 IESG [RFC4511]
delResponse 11 IESG [RFC4511]
modDNRequest 12 IESG [RFC4511]
modDNResponse 13 IESG [RFC4511]
compareRequest 14 IESG [RFC4511]
compareResponse 15 IESG [RFC4511]
abandonRequest 16 IESG [RFC4511]
reserved 17-18 IESG
searchResRef 19 IESG [RFC4511]
reserved 20-22 IESG
extendedReq 23 IESG [RFC4511]
extendedResp 24 IESG [RFC4511]
intermediateResponse 25 IESG [RFC4511]

resultCode values

Registration Procedure(s)
0-1023      Standards Action (can not start with e- or x-)
1024-4095   Expert Review with Specification Required (can not start with e- or x-)
4096-16383  First Come First Served (Shall start with e-)
16384 and higher Private Use (Shall start with x-)
Rolf Sonneveld, Andrew Findlay
Available Formats

Name Code Owner Reference
success 0 IESG [RFC4511]
operationsError 1 IESG [RFC4511]
protocolError 2 IESG [RFC4511]
timeLimitExceeded 3 IESG [RFC4511]
sizeLimitExceeded 4 IESG [RFC4511]
compareFalse 5 IESG [RFC4511]
compareTrue 6 IESG [RFC4511]
authMethodNotSupported 7 IESG [RFC4511]
strongerAuthRequired 8 IESG [RFC4511]
reserved (partialResults) 9 IESG [RFC4511]
referral 10 IESG [RFC4511]
adminLimitExceeded 11 IESG [RFC4511]
unavailableCriticalExtension 12 IESG [RFC4511]
confidentialityRequired 13 IESG [RFC4511]
saslBindInProgress 14 IESG [RFC4511]
noSuchAttribute 16 IESG [RFC4511]
undefinedAttributeType 17 IESG [RFC4511]
inappropriateMatching 18 IESG [RFC4511]
constraintViolation 19 IESG [RFC4511]
attributeOrValueExists 20 IESG [RFC4511]
invalidAttributeSyntax 21 IESG [RFC4511]
noSuchObject 32 IESG [RFC4511]
aliasProblem 33 IESG [RFC4511]
invalidDNSyntax 34 IESG [RFC4511]
reserved (isLeaf) 35 IESG [RFC4511]
aliasDereferencingProblem 36 IESG [RFC4511]
reserved 37-47 IESG
inappropriateAuthentication 48 IESG [RFC4511]
invalidCredentials 49 IESG [RFC4511]
insufficientAccessRights 50 IESG [RFC4511]
busy 51 IESG [RFC4511]
unavailable 52 IESG [RFC4511]
unwillingToPerform 53 IESG [RFC4511]
loopDetect 54 IESG [RFC4511]
reserved 55-63 IESG
namingViolation 64 IESG [RFC4511]
objectClassViolation 65 IESG [RFC4511]
notAllowedOnNonLeaf 66 IESG [RFC4511]
notAllowedOnRDN 67 IESG [RFC4511]
entryAlreadyExists 68 IESG [RFC4511]
objectClassModsProhibited 69 IESG [RFC4511]
reserved (resultsTooLarge) 70 IESG [RFC4511]
reserved 71-79 IESG
other 80 IESG [RFC4511]
reserved (APIs) 81-90 IESG [RFC4511]
reserved (LDAP APIs) 91-112
lcupResourcesExhausted 113 IESG [RFC3928]
lcupSecurityViolation 114 IESG [RFC3928]
lcupInvalidData 115 IESG [RFC3928]
lcupUnsupportedScheme 116 IESG [RFC3928]
lcupReloadRequired 117 IESG [RFC3928]
canceled 118 IESG [RFC3909]
noSuchOperation 119 IESG [RFC3909]
tooLate 120 IESG [RFC3909]
cannotCancel 121 IESG [RFC3909]
assertionFailed 122 IESG [RFC4528]
authorizationDenied 123 WELTMAN [RFC4370]
First Come, First Serve Range 4096-16383
e-syncRefreshRequired 4096 [Kurt_Zeilenga] [Jong_Hyuk_Choi] [RFC4533]

Bind Authentication Method

Registration Procedure(s)
0-1023      Standards Action (can not start with e- or x-)
1024-4095   Expert Review with Specification Required (can not start with e- or x-)
4096-16383  First Come First Served (Shall start with e-)
16384 and higher Private Use (Shall start with x-)
Rolf Sonneveld, Andrew Findlay
Available Formats

Method Value Owner Usage Reference
simple 0 IESG LIMITED USE [RFC4513][RFC4511]
krbv42LDAP 1 IESG OBSOLETE (See [2]) [RFC1777]
krbv42DSA 2 IESG OBSOLETE (See [2]) [RFC1777]
sasl 3 IESG COMMON [RFC4513][RFC4511]

LDAP Syntaxes

Registration Procedure(s)
First Come First Served
Available Formats

Object Identifier Syntax Owner Reference UUID IESG [RFC4530] Attribute Type Description IESG [RFC4517] Bit String IESG [RFC4517] Boolean IESG [RFC4517] Country String IESG [RFC4517] DN IESG [RFC4517] Delivery Method IESG [RFC4517] Directory String IESG [RFC4517] DIT Content Rule Description IESG [RFC4517] DIT Structure Rule Description IESG [RFC4517] Enhanced Guide IESG [RFC4517] Facsimile Telephone Number IESG [RFC4517] Fax IESG [RFC4517] Generalized Time IESG [RFC4517] Guide IESG [RFC4517] IA5 String IESG [RFC4517] Integer IESG [RFC4517] JPEG IESG [RFC4517] Matching Rule Description IESG [RFC4517] Matching Rule Use Description IESG [RFC4517] Name And Optional UID IESG [RFC4517] Name Form Description IESG [RFC4517] Numeric String IESG [RFC4517] Object Class Description IESG [RFC4517] OID IESG [RFC4517] Other Mailbox IESG [RFC4517] Octet String IESG [RFC4517] Postal Address IESG [RFC4517] Printable String IESG [RFC4517] Telephone Number IESG [RFC4517] Teletex Terminal Identifier IESG [RFC4517] Telex Number IESG [RFC4517] UTC Time IESG [RFC4517] LDAP Syntax Description IESG [RFC4517] Substring Assertion IESG [RFC4517]

LDAP Search Scopes

Registration Procedure(s)
0-1023      Standards Action (can not start with e- or x-)
1024-4095   Expert Review with Specification Required (can not start with e- or x-)
4096-16383  First Come First Served (Shall start with e-)
16384 and higher Private Use (Shall start with x-)
Rolf Sonneveld, Andrew Findlay
Available Formats

Name URLString Value Owner Reference
baseObject base 0 IESG [RFC4511][RFC4516]
singleLevel one 1 IESG [RFC4511][RFC4516]
wholeSubtree sub 2 IESG [RFC4511][RFC4516]

LDAP Filter Choices

Registration Procedure(s)
Standards Action
Available Formats

Name Value Owner Reference
and 0 IESG [RFC4511]
or 1 IESG [RFC4511]
not 2 IESG [RFC4511]
equalityMatch 3 IESG [RFC4511]
substrings 4 IESG [RFC4511]
greaterOrEqual 5 IESG [RFC4511]
lessOrEqual 6 IESG [RFC4511]
present 7 IESG [RFC4511]
approxMatch 8 IESG [RFC4511]
extensibleMatch 9 IESG [RFC4511]

LDAP ModifyRequest Operations

Registration Procedure(s)
0-1023      Standards Action (can not start with e- or x-)
1024-4095   Expert Review with Specification Required (can not start with e- or x-)
4096-16383  First Come First Served (Shall start with e-)
16384 and higher Private Use (Shall start with x-)
Rolf Sonneveld, Andrew Findlay
Available Formats

Name Value Owner Reference
add 0 IESG [RFC4511]
delete 1 IESG [RFC4511]
replace 2 IESG [RFC4511]
increment 3 IESG [RFC4525]

LDAP authzid prefixes

Registration Procedure(s)
x- Private Use
e- Reserved for Experiments, First Come First Served
All others, Standards Action or Expert Review with Specification Required
Rolf Sonneveld, Andrew Findlay
Available Formats

Name Prefix Owner Reference
dnAuthzId dn: IESG [RFC4513]
uAuthzId u: IESG [RFC4513]


ID Name Contact URI Last Updated
[Allen_Williams] Allen Williams mailto:allenwilliams& 2009-04-10
[Jong_Hyuk_Choi] Jong Hyuk Choi mailto:jongchoi& 2005-04
[Kurt_Zeilenga] Kurt Zeilenga mailto:Kurt& 2005-04
[Mark_Wahl] Mark Wahl mailto:Mark.Wahl& 2006-11-10
[Matthew_Key] Matthew Key mailto:mkey& 2011-12-05


family of options
These LDAPv2-only mechanisms were deprecated in favor of the LDAPv3 SASL authentication method, specifically the GSSAPI mechanism.