PingDirectory

Default matching rules

PingDirectory server provides a large set of matching rules that support a variety of applications.

The default matching rules available for the PingDirectory server are listed in the table below for each matching rule type:

  • Equality matches

  • Substring matches

  • Ordering matches

  • Approximate matches

Default Matching Rules
Matching Rule/OID Attribute Syntax/OID Description

uuidMatch/ 1.3.6.1.1.16.2

UUID/ 1.3.6.1.1.16.1

Compares an asserted UUID with a stored UUID attribute value for equality

uuidOrderingMatch/ 1.3.6.1.1.16.3

UUID/ 1.3.6.1.1.16.1

Compares the collation order of an asserted UUID with a stored UUID attribute value for ordering

caseExactIA5Match/ 1.3.6.1.4.1.1466.109.114.1

IA5 String/ 1.3.6.1.4.1.1466.115.121.1.26

Compares an asserted value with an attribute value of International Alphabet 5 (IA5) syntax

caseIgnoreIA5Match/ 1.3.6.1.4.1.1466.109.114.2

IA5 String/ 1.3.6.1.4.1.1466.115.121.1.26

Compares an asserted value with an attribute value of IA5 syntax

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

caseIgnoreIA5SubstringsMatch/ 1.3.6.1.4.1.1466.109.114.3

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring with an attribute value of IA5 string syntax

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

authPasswordExactMatch/ 1.3.6.1.4.1.4203.1.2.2

Authentication Password Syntax/ 1.3.6.1.4.1.4203.1.1.2

Authentication password exact matching rule

authPasswordMatch/ 1.3.6.1.4.1.4203.1.2.3

Authentication Password Syntax/ 1.3.6.1.4.1.4203.1.1.2

Authentication password matching rule

ds-mr-double-metaphone-approx/ 1.3.6.1.4.1.30221.1.4.1

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Syntax based on the phonetic Double Metaphone algorithm for approximate matching

ds-mr-user-password-exact/ 1.3.6.1.4.1.30221.1.4.2

User Password Syntax/ 1.3.6.1.4.1.30221.1.3.1

User password exact matching rule

ds-mr-user-password-equality/ 1.3.6.1.4.1.30221.1.4.3

User Password Syntax/ 1.3.6.1.4.1.30221.1.3.1

User password equality matching rule

historicalCsnOrderingMatch/ 1.3.6.1.4.1.30221.1.4.4

1.3.6.1.4.1.30221.1.3.5

Compares the collation order of a historical change sequence number with a historical Change Sequence Number (CSN) attribute value

caseExactIA5SubstringsMatch/ 1.3.6.1.4.1.30221.1.4.902

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring with an attribute value of IA5 string syntax

compactTimestampMatch/ 1.3.6.1.4.1.30221.2.4.1

Compact Timestamp/ 1.3.6.1.4.1.30221.2.3.1

Compact Timestamp matching rule

compactTimestampOrderingMatch/ 1.3.6.1.4.1.30221.2.4.2

Compact Timestamp/ 1.3.6.1.4.1.30221.2.3.1

Compares the collation order of a compact timestamp number with an attribute value of Compact Timestamp syntax

objectIdentifierMatch/ 2.5.13.0

OID/ 1.3.6.1.4.1.1466.115.121.1.38

Compares an asserted value with an attribute value of OID syntax

distinguishedNameMatch/ 2.5.13.1

DN/ 1.3.6.1.4.1.1466.115.121.1.12

Compares an asserted value with an attribute value of distinguished name (DN) syntax

Spaces around commas and semicolons are ignored. Spaces around plus and equal signs around relative distinguished name (RDN) components are ignored.

caseIgnoreMatch/ 2.5.13.2

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares an asserted value with an attribute value

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

caseIgnoreOrderingMatch/ 2.5.13.3

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares the collation order of the asserted string with an attribute value of Directory String syntax

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

caseIgnoreSubstringsMatch/ 2.5.13.4

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring value with an attribute value of Directory String syntax

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

caseExactMatch/ 2.5.13.5

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares an asserted value with an attribute value of Directory String syntax

caseExactOrderingMatch/ 2.5.13.6

Directory String 1.3.6.1.4.1.1466.115.121.1.15

Compares the collation order of the asserted string with an attribute value of Directory String syntax

caseExactSubstringsMatch/ 2.5.13.7

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring with an attribute value of Directory String syntax

numericStringMatch/ 2.5.13.8

Numeric String/ 1.3.6.1.4.1.1466.115.121.1.36

Compares an asserted value with an attribute value of Numeric String syntax. Spaces are ignored when performing these comparisons

numericStringOrderingMatch/ 2.5.13.9

Numeric String/ 1.3.6.1.4.1.1466.115.121.1.36

Compares the collation order of the asserted string with an attribute value of Numeric String syntax

Spaces are ignored when performing these comparisons.

numericStringSubstringsMatch/ 2.5.13.10

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring with an attribute value of Numeric String syntax

Spaces are ignored when performing these comparisons.

caseIgnoreListMatch/ 2.5.13.11

Postal Address/ 1.3.6.1.4.1.1466.115.121.1.41

Compares an asserted value with an attribute value, which is a sequence of Directory Strings

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

caseIgnoreListSubstringsMatch/ 2.5.13.12

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares the asserted substring with an attribute value, which is a sequence of Directory Strings

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

booleanMatch/ 2.5.13.13

Boolean/ 1.3.6.1.4.1.1466.115.121.1.7

Compares an asserted boolean value with an attribute value of BOOLEAN syntax

Returns true if the values are both TRUE or both FALSE.

integerMatch/ 2.5.13.14

Integer/ 1.3.6.1.4.1.1466.115.121.1.27

Compares an asserted value with an attribute value of INTEGER syntax

integerOrderingMatch/ 2.5.13.15

Integer/ 1.3.6.1.4.1.1466.115.121.1.27

Compares the collation order of the asserted integer with an attribute value of Integer syntax

Returns true if the attribute value is less than the asserted value.

bitStringMatch/ 2.5.13.16

Bit String/ 1.3.6.1.4.1.1466.115.121.1.6

Compares an asserted Bit String value with an attribute value of Bit String syntax

octetStringMatch/ 2.5.13.17

Octet String/ 1.3.6.1.4.1.1466.115.121.1.40

Compares an asserted value with an attribute value of octet string syntax using a byte-for-byte comparison

octetStringOrderingMatch/ 2.5.13.18

Octet String/ 1.3.6.1.4.1.1466.115.121.1.40

Compares the collation order of the asserted octet string with an attribute value of Octet String syntax

Zero precedes a one bit. Shorter strings precede longer strings.

octetStringSubstringsMatch/ 2.5.13.19

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring with an attribute value of octet string syntax using a byte-for-byte comparison

telephoneNumberMatch/ 2.5.13.20

Telephone Number/ 1.3.6.1.4.1.1466.115.121.1.50

Compares an asserted value with an attribute value of Telephone Number syntax

telephoneNumberSubstringsMatch/ 2.5.13.21

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted value with the substrings of an attribute value of Telephone Number String syntax

presentationAddressMatch/ 2.5.13.22

Presentation Address/ 1.3.6.1.4.1.1466.115.121.1.43

Compares an asserted value with an attribute value of Presentation Address syntax

uniqueMemberMatch/ 2.5.13.23

Name and Optional UID/ 1.3.6.1.4.1.1466.115.121.1.34

Compares an asserted value with an attribute value of Unique Member syntax

protocolInformationMatch/ 2.5.13.24

Protocol Information/ 1.3.6.1.4.1.1466.115.121.1.42

Compares an asserted value with an attribute value of Protocol Information syntax

generalizedTimeMatch/ 2.5.13.27

Generalized Time/ 1.3.6.1.4.1.1466.115.121.1.24

Compares an asserted value with an attribute value of Generalized Time syntax

generalizedTimeOrderingMatch/ 2.5.13.28

Generalized Time 1.3.6.1.4.1.1466.115.121.1.24

Compares the collation order of the asserted string with an attribute value of Generalized Time String syntax and case is ignored

integerFirstComponentMatch/ 2.5.13.29

Integer/ 1.3.6.1.4.1.1466.115.121.1.27

Equality matching rules for subschema attributes between an Integer syntax and the value syntax

objectIdentifierFirstComponentMatch/ 2.5.13.30

OID/ 1.3.6.1.4.1.1466.115.121.1.38

Equality matching rules for subschema attributes between an OID syntax and the value syntax

directoryStringFirstComponentMatch/ 2.5.13.31

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares an asserted Directory String value with an attribute value of type SEQUENCE whose first component is mandatory and of type Directory String

Returns true if the attribute value has a first component whose value matches the asserted Directory String using the rules of caseIgnoreMatch.

wordMatch/ 2.5.13.32

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares an asserted word with any word in the attribute value for equality

keywordMatch/ 2.5.13.33

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares an asserted value with any keyword in the attribute value for equality