3.1.1.5.1.2 Naming Constraints

  • Article

During an originating update of the Add, Modify, and Modify DN operations, the server validates the following naming constraints. Unless otherwise specified, the server returns the error namingViolation / <unrestricted> if a naming constraint is not met.

  • The RDN MUST not contain a character with value 0xA.

  • The RDN MUST not contain a character with value 0x0; otherwise, the server SHOULD return the error invalidDNSyntax / <unrestricted>. However, if the DC functional level is DS_BEHAVIOR_WIN2000, the server will not return an error.

  • The DN MUST be compliant with [RFC2253].

  • The RDN size MUST be less than 255 characters.

Naming constraints are not enforced for replicated updates.