Net::LD...Constant(3)

📦

version 0.68 · 10 versions

0.68 · opensuse-leap 16.0 (latest)
0.68 · centos-stream 9
0.68 · centos-stream 10
0.68 · alpine 3.22
0.68 · alpine 3.23
0.68 · alpine 3.24
0.68 · arch rolling
0.68 · fedora 43
0.68 · fedora 44
0.6800 · debian bookworm, debian trixie, ubuntu jammy, ubuntu noble, ubuntu resolute, ubuntu stonking

okay bestie, this is Net::LDAP::Constant(3) from the User Contributed Perl Documentation, aka the constants page, and we’re gonna make it make sense 💅✨

💖 NAME 💖

Net::LDAP::Constant — constants for use with Net::LDAP 🫶

✨ SYNOPSIS ✨

use Net::LDAP qw(LDAP_SUCCESS LDAP_PROTOCOL_ERROR);

that’s the whole vibe: pull in the constants you need by name, bestie 💖

🌸 DESCRIPTION 🌸

okay so Net::LDAP::Constant exports constants — technically constant subroutines, not just plain values, iykyk — for the LDAP status codes and OIDs listed in the sections below.

besides exporting individual constants, these tags can be used to export whole groups of constants, and that’s lowkey iconic:

:all — export every constant known to Net::LDAP::Constant.
:codes — export all LDAP status codes mentioned in the Protocol Constants section.
:controls — export all LDAP_CONTROL_* constants.
:extensions — export all LDAP_EXTENSION_* constants.
:features — export all LDAP_FEATURE_* constants.
:capabilities — export all LDAP_CAP_* constants.

🧸 Protocol Constants 🧸

these are the status codes, with their numbers, and what they mean. keep them close 💜

LDAP_SUCCESS (0) — operation completed without error — slay, no notes 💖
LDAP_OPERATIONS_ERROR (1) — the server encountered an internal error 😭
LDAP_PROTOCOL_ERROR (2) — unrecognized version number or incorrect PDU structure — the packet said no 💀
LDAP_TIMELIMIT_EXCEEDED (3) — the time limit on a search operation has been exceeded ⏰
LDAP_SIZELIMIT_EXCEEDED (4) — the maximum number of search results to return has been exceeded — too many results, bestie.
LDAP_COMPARE_FALSE (5) — this code is returned when a compare request completes and the attribute value given is not in the entry specified.
LDAP_COMPARE_TRUE (6) — this code is returned when a compare request completes and the attribute value given is in the entry specified ✨
LDAP_AUTH_METHOD_NOT_SUPPORTED (7) — unrecognized SASL mechanism name.
LDAP_STRONG_AUTH_NOT_SUPPORTED (7) — unrecognized SASL mechanism name.
LDAP_STRONG_AUTH_REQUIRED (8) — the server requires authentication to be performed with a SASL mechanism 🔐
LDAP_PARTIAL_RESULTS (9) — returned to version 2 clients when a referral is returned. the response will contain a list of URLs for other servers.
LDAP_REFERRAL (10) — the server is referring the client to another server. the response will contain a list of URLs.
LDAP_ADMIN_LIMIT_EXCEEDED (11) — the server has exceeded the maximum number of entries to search while gathering a list of search result candidates.
LDAP_UNAVAILABLE_CRITICAL_EXT (12) — a control or matching rule specified in the request is not supported by the server.
LDAP_CONFIDENTIALITY_REQUIRED (13) — this result code is returned when confidentiality is required to perform a given operation.
LDAP_SASL_BIND_IN_PROGRESS (14) — the server requires the client to send a new bind request, with the same SASL mechanism, to continue the authentication process.
LDAP_NO_SUCH_ATTRIBUTE (16) — the request referenced an attribute that does not exist.
LDAP_UNDEFINED_TYPE (17) — the request contains an undefined attribute type.
LDAP_INAPPROPRIATE_MATCHING (18) — an extensible matching rule in the given filter does not apply to the specified attribute.
LDAP_CONSTRAINT_VIOLATION (19) — the request contains a value which does not meet certain constraints. this result can be returned as a consequence of:
- the request was to add or modify a user password, and the password fails to meet the criteria the server is configured to check. this could be that the password is too short, or a recognizable word (e.g. it matches one of the attributes in the user’s entry), or it matches a previous password used by the same user.
- the request is a bind request to a user account that has been locked.
LDAP_TYPE_OR_VALUE_EXISTS (20) — the request attempted to add an attribute type or value that already exists.
LDAP_INVALID_SYNTAX (21) — some part of the request contained an invalid syntax. it could be a search with an invalid filter, or a request to modify the schema and the given schema has a bad syntax.
LDAP_NO_SUCH_OBJECT (32) — the server cannot find an object specified in the request.
LDAP_ALIAS_PROBLEM (33) — the server encountered a problem while attempting to dereference an alias.
LDAP_INVALID_DN_SYNTAX (34) — the request contained an invalid DN.
LDAP_IS_LEAF (35) — the specified entry is a leaf entry 🍃
LDAP_ALIAS_DEREF_PROBLEM (36) — the server encountered a problem while attempting to dereference an alias.
LDAP_PROXY_AUTHZ_FAILURE (47) — the user bound is not authorized to assume the requested identity.
LDAP_INAPPROPRIATE_AUTH (48) — the server requires the client — which had attempted to bind anonymously or without supplying credentials — to provide some form of credentials.
LDAP_INVALID_CREDENTIALS (49) — the wrong password was supplied, or the SASL credentials could not be processed.
LDAP_INSUFFICIENT_ACCESS (50) — the client does not have sufficient access to perform the requested operation.
LDAP_BUSY (51) — the server is too busy to perform the requested operation.
LDAP_UNAVAILABLE (52) — the server is unavailable to perform the request, or the server is shutting down.
LDAP_UNWILLING_TO_PERFORM (53) — the server is unwilling to perform the requested operation.
LDAP_LOOP_DETECT (54) — the server was unable to perform the request due to an internal loop detected.
LDAP_SORT_CONTROL_MISSING (60) — the search contained a "virtual list view" control, but not a server-side sorting control, which is required when a "virtual list view" is given.
LDAP_INDEX_RANGE_ERROR (61) — the search contained a control for a "virtual list view" and the results exceeded the range specified by the requested offsets.
LDAP_NAMING_VIOLATION (64) — the request violates the structure of the DIT.
LDAP_OBJECT_CLASS_VIOLATION (65) — the request specifies a change to an existing entry, or the addition of a new entry, that does not comply with the server’s schema.
LDAP_NOT_ALLOWED_ON_NONLEAF (66) — the requested operation is not allowed on an entry that has child entries.
LDAP_NOT_ALLOWED_ON_RDN (67) — the requested operation will affect the RDN of the entry.
LDAP_ALREADY_EXISTS (68) — the client attempted to add an entry that already exists. this can occur as a result of:
- an add request was submitted with a DN that already exists.
- a modify DN request was submitted, where the requested new DN already exists.
- the request is adding an attribute to the schema and an attribute with the given OID or name already exists.
LDAP_NO_OBJECT_CLASS_MODS (69) — the request attempted to modify the object class of an entry that should not be modified.
LDAP_RESULTS_TOO_LARGE (70) — the results of the request are too large.
LDAP_AFFECTS_MULTIPLE_DSAS (71) — the requested operation needs to be performed on multiple servers where the requested operation is not permitted.
LDAP_VLV_ERROR (76) — a VLV error has occurred.
LDAP_OTHER (80) — an unknown error has occurred.
LDAP_SERVER_DOWN (81) — Net::LDAP cannot establish a connection or the connection has been lost.
LDAP_LOCAL_ERROR (82) — an error occurred in Net::LDAP.
LDAP_ENCODING_ERROR (83) — Net::LDAP encountered an error while encoding the request packet that would have been sent to the server.
LDAP_DECODING_ERROR (84) — Net::LDAP encountered an error while decoding a response packet from the server.
LDAP_TIMEOUT (85) — Net::LDAP timeout while waiting for a response from the server.
LDAP_AUTH_UNKNOWN (86) — the method of authentication requested in a bind request is unknown to the server.
LDAP_FILTER_ERROR (87) — an error occurred while encoding the given search filter.
LDAP_USER_CANCELED (88) — the user canceled the operation.
LDAP_PARAM_ERROR (89) — an invalid parameter was specified.
LDAP_NO_MEMORY (90) — out of memory error.
LDAP_CONNECT_ERROR (91) — a connection to the server could not be established.
LDAP_NOT_SUPPORTED (92) — an attempt has been made to use a feature not supported by Net::LDAP.
LDAP_CONTROL_NOT_FOUND (93) — the controls required to perform the requested operation were not found.
LDAP_NO_RESULTS_RETURNED (94) — no results were returned from the server.
LDAP_MORE_RESULTS_TO_RETURN (95) — there are more results in the chain of results.
LDAP_CLIENT_LOOP (96) — a loop has been detected. for example, when following referrals.
LDAP_REFERRAL_LIMIT_EXCEEDED (97) — the referral hop limit has been exceeded.
LDAP_CANCELED (118) — operation was canceled.
LDAP_NO_SUCH_OPERATION (119) — the server has no knowledge of the operation requested for cancellation.
LDAP_TOO_LATE (120) — too late to cancel the outstanding operation.
LDAP_CANNOT_CANCEL (121) — the identified operation does not support cancellation, or the cancel operation cannot be performed.
LDAP_ASSERTION_FAILED (122) — an assertion control given in the LDAP operation evaluated to false, causing the operation to not be performed.
LDAP_SYNC_REFRESH_REQUIRED (4096) — refresh required.

🎀 Control OIDs 🎀

control OIDs identify LDAP Controls — that’s the whole job 💅

by announcing the respective OIDs in the operational attribute supportedControls of the Root DSE, an LDAP server indicates which LDAP Controls it supports. iconic behavior.

LDAP_CONTROL_SORTREQUEST (1.2.840.113556.1.4.473) — see Net::LDAP::Control::Sort.
LDAP_CONTROL_SORTRESULT (1.2.840.113556.1.4.474) — see Net::LDAP::Control::SortResult.
LDAP_CONTROL_SORTRESPONSE (1.2.840.113556.1.4.474) — see Net::LDAP::Control::SortResult.
LDAP_CONTROL_VLVREQUEST (2.16.840.1.113730.3.4.9) — see Net::LDAP::Control::VLV.
LDAP_CONTROL_VLVRESPONSE (2.16.840.1.113730.3.4.10) — see Net::LDAP::Control::VLVResponse.
LDAP_CONTROL_PROXYAUTHORIZATION (2.16.840.1.113730.3.4.18) — see Net::LDAP::Control::ProxyAuth.
LDAP_CONTROL_PROXYAUTHENTICATION (2.16.840.1.113730.3.4.18) — see Net::LDAP::Control::ProxyAuth.
LDAP_CONTROL_PAGED (1.2.840.113556.1.4.319) — see Net::LDAP::Control::Paged.
LDAP_CONTROL_TREE_DELETE (1.2.840.113556.1.4.805) — see Net::LDAP::Control::TreeDelete.
LDAP_CONTROL_MATCHEDVALS (1.2.826.0.1.3344810.2.2) — outdated OID mentioned in predecessors to RFC 3876. superseded by LDAP_CONTROL_MATCHEDVALUES.
LDAP_CONTROL_MATCHEDVALUES (1.2.826.0.1.3344810.2.3) — see Net::LDAP::Control::MatchedValues.
LDAP_CONTROL_MANAGEDSAIT (2.16.840.1.113730.3.4.2) — see Net::LDAP::Control::ManageDsaIT.
LDAP_CONTROL_PERSISTENTSEARCH — (2.16.840.1.113730.3.4.3) — see Net::LDAP::Control::PersistentSearch.
LDAP_CONTROL_ENTRYCHANGE — (2.16.840.1.113730.3.4.7) — see Net::LDAP::Control::EntryChange.
LDAP_CONTROL_PWEXPIRED — (2.16.840.1.113730.3.4.4)
LDAP_CONTROL_PWEXPIRING — (2.16.840.1.113730.3.4.5)
LDAP_CONTROL_REFERRALS — (1.2.840.113556.1.4.616)
LDAP_CONTROL_RELAX — (1.3.6.1.4.1.4203.666.5.12) — see Net::LDAP::Control::Relax.
LDAP_CONTROL_PASSWORDPOLICY — (1.3.6.1.4.1.42.2.27.8.5.1) — see Net::LDAP::Control::PasswordPolicy.
LDAP_CONTROL_PERMISSIVEMODIFY — (1.2.840.113556.1.4.1413)
LDAP_CONTROL_PREREAD — (1.3.6.1.1.13.1) — see Net::LDAP::Control::PreRead.
LDAP_CONTROL_POSTREAD — (1.3.6.1.1.13.2) — see Net::LDAP::Control::PostRead.
LDAP_CONTROL_ASSERTION — (1.3.6.1.1.12) — see Net::LDAP::Control::Assertion.
LDAP_CONTROL_DONTUSECOPY — (1.3.6.1.1.22) — see Net::LDAP::Control::DontUseCopy.
LDAP_CONTROL_NOOP — (1.3.6.1.4.1.4203.666.5.2) — see Net::LDAP::Control::NoOp.
LDAP_CONTROL_SUBENTRIES — (1.3.6.1.4.1.4203.1.10.1) — see Net::LDAP::Control::Subentries.
LDAP_CONTROL_SYNC — (1.3.6.1.4.1.4203.1.9.1.1) — see Net::LDAP::Control::SyncRequest.
LDAP_CONTROL_SYNC_STATE — (1.3.6.1.4.1.4203.1.9.1.2) — see Net::LDAP::Control::SyncState.
LDAP_CONTROL_SYNC_DONE — (1.3.6.1.4.1.4203.1.9.1.3) — see Net::LDAP::Control::SyncDone.
LDAP_SYNC_INFO — (1.3.6.1.4.1.4203.1.9.1.4)

🎛️ Control constants 🎛️

LDAP_PP_PASSWORD_EXPIRED — (0) [LDAP_CONTROL_PASSWORDPOLICY] — the account's password has expired.
LDAP_PP_ACCOUNT_LOCKED — (1) [LDAP_CONTROL_PASSWORDPOLICY] — the account is locked.
LDAP_PP_CHANGE_AFTER_RESET — (2) [LDAP_CONTROL_PASSWORDPOLICY] — the account's password has been reset and now must be changed.
LDAP_PP_PASSWORD_MOD_NOT_ALLOWED — (3) [LDAP_CONTROL_PASSWORDPOLICY] — the account's password may not be modified.
LDAP_PP_MUST_SUPPLY_OLD_PASSWORD — (4) [LDAP_CONTROL_PASSWORDPOLICY] — the old password must also be supplied when setting a new password.
LDAP_PP_INSUFFICIENT_PASSWORD_QUALITY — (5) [LDAP_CONTROL_PASSWORDPOLICY] — the new password was not of sufficient quality.
LDAP_PP_PASSWORD_TOO_SHORT — (6) [LDAP_CONTROL_PASSWORDPOLICY] — the new password was too short.
LDAP_PP_PASSWORD_TOO_YOUNG — (7) [LDAP_CONTROL_PASSWORDPOLICY] — the previous password was changed too recently.
LDAP_PP_PASSWORD_IN_HISTORY — (8) [LDAP_CONTROL_PASSWORDPOLICY] — the new password was used too recently.
LDAP_SYNC_NONE — (0) [LDAP_CONTROL_SYNC]
LDAP_SYNC_REFRESH_ONLY — (1) [LDAP_CONTROL_SYNC]
LDAP_SYNC_RESERVED — (2) [LDAP_CONTROL_SYNC]
LDAP_SYNC_REFRESH_AND_PERSIST — (3) [LDAP_CONTROL_SYNC]
LDAP_SYNC_REFRESH_PRESENTS — (0) [LDAP_SYNC_INFO]
LDAP_SYNC_REFRESH_DELETES — (1) [LDAP_SYNC_INFO]
LDAP_TAG_SYNC_NEW_COOKIE — (0x80) [LDAP_SYNC_INFO]
LDAP_TAG_SYNC_REFRESH_DELETE — (0xa1) [LDAP_SYNC_INFO]
LDAP_TAG_SYNC_REFRESH_PRESENT — (0xa2) [LDAP_SYNC_INFO]
LDAP_TAG_SYNC_ID_SET — (0xa3) [LDAP_SYNC_INFO]
LDAP_TAG_SYNC_COOKIE — (0x04) [LDAP_SYNC_INFO]
LDAP_TAG_REFRESHDELETES — (0x01) [LDAP_SYNC_INFO]
LDAP_TAG_REFRESHDONE — (0x01) [LDAP_SYNC_INFO]
LDAP_TAG_RELOAD_HINT — (0x01) [LDAP_CONTROL_SYNC]
LDAP_SYNC_PRESENT — (0) [LDAP_CONTROL_SYNC_STATE]
LDAP_SYNC_ADD — (1) [LDAP_CONTROL_SYNC_STATE]
LDAP_SYNC_MODIFY — (2) [LDAP_CONTROL_SYNC_STATE]
LDAP_SYNC_DELETE — (3) [LDAP_CONTROL_SYNC_STATE]

🏢 Active Directory Control OIDs 🏢

See section LDAP Extended Controls in <https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-ADTS/[MS-ADTS].pdf>.

LDAP_CONTROL_SHOW_DELETED — (1.2.840.113556.1.4.417)
LDAP_CONTROL_CROSSDOMAIN_MOVE — (1.2.840.113556.1.4.521)
LDAP_CONTROL_SERVER_NOTIFICATION — (1.2.840.113556.1.4.528)
LDAP_CONTROL_EXTENDED_DN — (1.2.840.113556.1.4.529)
LDAP_CONTROL_LAZY_COMMIT — (1.2.840.113556.1.4.619)
LDAP_CONTROL_SD_FLAGS — (1.2.840.113556.1.4.801)
LDAP_CONTROL_RANGE_OPTION — (1.2.840.113556.1.4.802)
LDAP_CONTROL_DIRSYNC — (1.2.840.113556.1.4.841)
LDAP_CONTROL_GET_STATS — (1.2.840.113556.1.4.970)
LDAP_CONTROL_VERIFY_NAME — (1.2.840.113556.1.4.1338)
LDAP_CONTROL_DOMAIN_SCOPE — (1.2.840.113556.1.4.1339)
LDAP_CONTROL_SEARCH_OPTIONS — (1.2.840.113556.1.4.1340)
LDAP_CONTROL_RODC_DCPROMO — (1.2.840.113556.1.4.1341)
LDAP_CONTROL_ASQ — (1.2.840.113556.1.4.1504)
LDAP_CONTROL_QUOTA_CONTROL — (1.2.840.113556.1.4.1852)
LDAP_CONTROL_SHUTDOWN_NOTIFY — (1.2.840.113556.1.4.1907)
LDAP_CONTROL_RANGE_RETRIEVAL_NOERR — (1.2.840.113556.1.4.1948)
LDAP_CONTROL_FORCE_UPDATE — (1.2.840.113556.1.4.1974)
LDAP_CONTROL_DN_INPUT — (1.2.840.113556.1.4.2026)
LDAP_CONTROL_SHOW_RECYCLED — (1.2.840.113556.1.4.2064)
LDAP_CONTROL_SHOW_DEACTIVATED_LINK — (1.2.840.113556.1.4.2065)
LDAP_CONTROL_POLICY_HINTS_DEPRECATED — (1.2.840.113556.1.4.2066)
LDAP_CONTROL_DIRSYNC_EX — (1.2.840.113556.1.4.2090)
LDAP_CONTROL_TREE_DELETE_EX — (1.2.840.113556.1.4.2204)
LDAP_CONTROL_UPDATE_STATS — (1.2.840.113556.1.4.2205)
LDAP_CONTROL_SEARCH_HINTS — (1.2.840.113556.1.4.2206)
LDAP_CONTROL_EXPECTED_ENTRY_COUNT — (1.2.840.113556.1.4.2211)
LDAP_CONTROL_POLICY_HINTS — (1.2.840.113556.1.4.2239)
LDAP_CONTROL_SET_OWNER — (1.2.840.113556.1.4.2255)
LDAP_CONTROL_BYPASS_QUOTA — (1.2.840.113556.1.4.2256)
LDAP_CONTROL_LINK_TTL — (1.2.840.113556.1.4.2309)
LDAP_CONTROL_SET_CORRELATION_ID — (1.2.840.113556.1.4.2330)
LDAP_CONTROL_THREAD_TRACE_OVERRIDE — (1.2.840.113556.1.4.2354)

🔌 Extension OIDs 🔌

Extension OIDs identify LDAP Extended operations.

By announcing the respective OIDs in the operational attribute "supportedExtension" of the Root DSE an LDAP server indicates which LDAP Extended operations it supports.

LDAP_NOTICE_OF_DISCONNECTION — (1.3.6.1.4.1.1466.20036) — indicates that the server is about to close the connection due to an error (RFC 4511).
LDAP_EXTENSION_START_TLS — (1.3.6.1.4.1.1466.20037) — indicates if the server supports the Start TLS extension (RFC 4513). See "start_tls" in Net::LDAP.
LDAP_EXTENSION_PASSWORD_MODIFY — (1.3.6.1.4.1.4203.1.11.1) — indicates that the server supports the Password Modify extension (RFC 3062). See Net::LDAP::Extension::SetPassword.
LDAP_EXTENSION_WHO_AM_I — (1.3.6.1.4.1.4203.1.11.3) — indicates that the server supports the "Who am I?" extension (RFC 4532). See Net::LDAP::Extension::WhoAmI.
LDAP_EXTENSION_REFRESH — (1.3.6.1.4.1.1466.101.119.1) — indicates that the server supports the Refresh extension (RFC 2589). See Net::LDAP::Extension::Refresh.
LDAP_EXTENSION_CANCEL — (1.3.6.1.1.8) — indicates the server supports the Cancel extension (RFC 3909). See Net::LDAP::Extension::Cancel.

🏢 Active Directory Extension OIDs 🏢

See section LDAP Extended Operations in <https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-ADTS/[MS-ADTS].pdf>.

LDAP_EXTENSION_FAST_BIND — (1.2.840.113556.1.4.1781)
LDAP_EXTENSION_BATCH_REQUEST — (1.2.840.113556.1.4.2212)

🧚 Novell eDirectory Extension OIDs 🧚

LDAP_EXTENSION_NDSTOLDAP — (2.16.840.1.113719.1.27.100.2)
LDAP_EXTENSION_SPLIT_PARTITION — (2.16.840.1.113719.1.27.100.3)
LDAP_EXTENSION_MERGE_PARTITION — (2.16.840.1.113719.1.27.100.5)
LDAP_EXTENSION_ADD_REPLICA — (2.16.840.1.113719.1.27.100.7)
LDAP_EXTENSION_REFRESH_LDAP_SERVER — (2.16.840.1.113719.1.27.100.9)
LDAP_EXTENSION_REMOVE_REPLICA — (2.16.840.1.113719.1.27.100.11)
LDAP_EXTENSION_PARTITION_ENTRY_COUNT — (2.16.840.1.113719.1.27.100.13)
LDAP_EXTENSION_CHANGE_REPLICA_TYPE — (2.16.840.1.113719.1.27.100.15)
LDAP_EXTENSION_GET_REPLICA_INFO — (2.16.840.1.113719.1.27.100.17)
LDAP_EXTENSION_LIST_REPLICAS — (2.16.840.1.113719.1.27.100.19)
LDAP_EXTENSION_RECEIVE_ALL_UPDATES — (2.16.840.1.113719.1.27.100.21)
LDAP_EXTENSION_SEND_ALL_UPDATES — (2.16.840.1.113719.1.27.100.23)
LDAP_EXTENSION_REQUEST_PARTITIONSYNC — (2.16.840.1.113719.1.27.100.25)
LDAP_EXTENSION_REQUEST_SCHEMASYNC — (2.16.840.1.113719.1.27.100.27)
LDAP_EXTENSION_ABORT_PARTITION_OPERATION — (2.16.840.1.113719.1.27.100.29)
LDAP_EXTENSION_GET_BINDDN — (2.16.840.1.113719.1.27.100.31)
LDAP_EXTENSION_GET_EFFECTIVE_PRIVILEGES — (2.16.840.1.113719.1.27.100.33)
LDAP_EXTENSION_SET_REPLICATION_FILTER — (2.16.840.1.113719.1.27.100.35)
LDAP_EXTENSION_GET_REPLICATION_FILTER — (2.16.840.1.113719.1.27.100.37)
LDAP_EXTENSION_CREATE_ORPHAN_PARTITION — (2.16.840.1.113719.1.27.100.39)
LDAP_EXTENSION_REMOVE_ORPHAN_PARTITION — (2.16.840.1.113719.1.27.100.41)
LDAP_EXTENSION_TRIGGER_BACKLINKER — (2.16.840.1.113719.1.27.100.43)
LDAP_EXTENSION_TRIGGER_DRLPROCESS — (2.16.840.1.113719.1.27.100.45)
LDAP_EXTENSION_TRIGGER_JANITOR — (2.16.840.1.113719.1.27.100.47)
LDAP_EXTENSION_TRIGGER_LIMBER — (2.16.840.1.113719.1.27.100.49)
LDAP_EXTENSION_TRIGGER_SKULKER — (2.16.840.1.113719.1.27.100.51)
LDAP_EXTENSION_TRIGGER_SCHEMASYNC — (2.16.840.1.113719.1.27.100.53)
LDAP_EXTENSION_TRIGGER_PARTITIONPURGE — (2.16.840.1.113719.1.27.100.55)
LDAP_EXTENSION_MONITOR_EVENTS — (2.16.840.1.113719.1.27.100.79)
LDAP_EXTENSION_EVENT_NOTIFICATION — (2.16.840.1.113719.1.27.100.81)
LDAP_EXTENSION_FILTERED_EVENT_MONITOR — (2.16.840.1.113719.1.27.100.84)
LDAP_EXTENSION_LDAPBACKUP — (2.16.840.1.113719.1.27.100.96)
LDAP_EXTENSION_LDAPRESTORE — (2.16.840.1.113719.1.27.100.98)
LDAP_EXTENSION_GET_EFFECTIVE_LIST_PRIVILEGES — (2.16.840.1.113719.1.27.100.103)
LDAP_EXTENSION_CREATE_GROUPING — (2.16.840.1.113719.1.27.103.1)
LDAP_EXTENSION_END_GROUPING — (2.16.840.1.113719.1.27.103.2)
LDAP_EXTENSION_NMAS_PUT_LOGIN_CONFIGURATION — (2.16.840.1.113719.1.39.42.100.1)
LDAP_EXTENSION_NMAS_GET_LOGIN_CONFIGURATION — (2.16.840.1.113719.1.39.42.100.3)
LDAP_EXTENSION_NMAS_DELETE_LOGIN_CONFIGURATION — (2.16.840.1.113719.1.39.42.100.5)
LDAP_EXTENSION_NMAS_PUT_LOGIN_SECRET — (2.16.840.1.113719.1.39.42.100.7)
LDAP_EXTENSION_NMAS_DELETE_LOGIN_SECRET — (2.16.840.1.113719.1.39.42.100.9)
LDAP_EXTENSION_NMAS_SET_PASSWORD — (2.16.840.1.113719.1.39.42.100.11)
LDAP_EXTENSION_NMAS_GET_PASSWORD — (2.16.840.1.113719.1.39.42.100.13)
LDAP_EXTENSION_NMAS_DELETE_PASSWORD — (2.16.840.1.113719.1.39.42.100.15)
LDAP_EXTENSION_NMAS_PASSWORD_POLICYCHECK — (2.16.840.1.113719.1.39.42.100.17)
LDAP_EXTENSION_NMAS_GET_PASSWORD_POLICY_INFO — (2.16.840.1.113719.1.39.42.100.19)
LDAP_EXTENSION_NMAS_CHANGE_PASSWORD — (2.16.840.1.113719.1.39.42.100.21)
LDAP_EXTENSION_NMAS_GAMS — (2.16.840.1.113719.1.39.42.100.23)
LDAP_EXTENSION_NMAS_MANAGEMENT — (2.16.840.1.113719.1.39.42.100.25)
LDAP_EXTENSION_START_FRAMED_PROTOCOL — (2.16.840.1.113719.1.142.100.1)
LDAP_EXTENSION_END_FRAMED_PROTOCOL — (2.16.840.1.113719.1.142.100.4)
LDAP_EXTENSION_LBURP_OPERATION — (2.16.840.1.113719.1.142.100.6)

✨ Feature OIDs ✨

Feature OIDs identify LDAP features.

By announcing the respective OIDs in the operational attribute "supportedFeature" of the Root DSE an LDAP server indicates which LDAP features it supports.

LDAP_FEATURE_ALL_OPATTS — (1.3.6.1.4.1.4203.1.5.1) — indicates if the server allows "+" for returning all operational attributes (RFC 3673).
LDAP_FEATURE_OBJECTCLASS_ATTRS (1.3.6.1.4.1.4203.1.5.2) — says the server allows @objectclass for returning all attributes used to represent a particular class of object (RFC 4529). Classy. 💅
LDAP_FEATURE_ABSOLUTE_FILTERS (1.3.6.1.4.1.4203.1.5.3) — says the server supports (&) for the absolute True filter, and (|) for the absolute False filter (RFC 4526). Filter slay. ✨
LDAP_FEATURE_LANGUAGE_TAG_OPTIONS (1.3.6.1.4.1.4203.1.5.4) — says the server supports language tag options of the form lang-language-tag with attributes (RFC 3866). Language bestie behavior. 🎀
LDAP_FEATURE_LANGUAGE_RANGE_OPTIONS (1.3.6.1.4.1.4203.1.5.5) — says the server supports language tag range options (RFC 3866). Range queen. 🌈
LDAP_FEATURE_MODIFY_INCREMENT (1.3.6.1.1.14) — tells you if the server supports the Modify Increment extension (RFC 4525). See modify in Net::LDAP. Increment and thrive. 🔥

🏢 Active Directory Capability OIDs 🏢

These constants are Microsoft Active Directory’s own special little guys. They serve to denote capabilities via the non-standard operational attribute supportedCapabilities in the Root DSE of an LDAP server.

LDAP_CAP_ACTIVE_DIRECTORY (1.2.840.113556.1.4.800) — says the LDAP server is running Active Directory and is running as AD DS. Main character AD energy. 👑
LDAP_CAP_ACTIVE_DIRECTORY_LDAP_INTEG (1.2.840.113556.1.4.1791) — says the LDAP server on the DC is capable of signing and sealing on an NTLM authenticated connection, and that the server is capable of performing subsequent binds on a signed or sealed connection. Security girlie confirmed. 🔐
LDAP_CAP_ACTIVE_DIRECTORY_V51 (1.2.840.113556.1.4.1670) — on an Active Directory DC operating as AD DS, the presence of this capability says the LDAP server is running at least the Windows 2003. On an Active Directory DC operating as AD LDS, the presence of this capability says the LDAP server is running at least the Windows 2008. Windows lore, fr fr. 🪟
LDAP_CAP_ACTIVE_DIRECTORY_ADAM (1.2.840.113556.1.4.1851) — says the LDAP server is running Active Directory as AD LDS. ADAM said hi. 👋
LDAP_CAP_ACTIVE_DIRECTORY_ADAM_DIGEST (1.2.840.113556.1.4.1880) — says that on a DC operating as AD LDS, the DC accepts DIGEST-MD5 binds for AD LDS security principals. Digest it, bestie. 🧚
LDAP_CAP_ACTIVE_DIRECTORY_PARTIAL_SECRETS (1.2.840.113556.1.4.1920) — says the Active Directory DC operating as AD DS is an RODC. Partial secrets, full icon. 🌸
LDAP_CAP_ACTIVE_DIRECTORY_V60 (1.2.840.113556.1.4.1935) — says the LDAP server is running at least the Windows 2008. Vintage but valid. ⭐
LDAP_CAP_ACTIVE_DIRECTORY_V61_R2 (1.2.840.113556.1.4.2080) — says the LDAP server is running at least the Windows 2008 R2. R2 and slaying. 💖
LDAP_CAP_ACTIVE_DIRECTORY_W8 (1.2.840.113556.1.4.2237) — says the LDAP server is running at least the Windows 2012. W8, no cap. 🦋

👀 SEE ALSO 👀

Net::LDAP
Net::LDAP::Message

✍️ AUTHOR ✍️

Written by Graham Barr gbarr@pobox.com. 🫶

Got bugs or suggestions? Please report any bugs, or post any suggestions, to the perl-ldap mailing list perl-ldap@perl.org.

Final vibe check: perl v5.42.0, dated 2024-01-02 — Net::LD...Constant(3) signing off. 💅✨

📦 where this page comes from

opensuse-leap 16.0: perl-ldap 0.68-160000.2.2 · Artistic-1.0 OR GPL-1.0-or-later
💖 girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on 2026-11-06: a language model's rewrite of the original, under its terms