The default matching rules available for the PingDirectory server are listed in the table below for each matching rule type:

  • Equality matches
  • Substring matches
  • Ordering matches
  • Approximate matches
Default Matching Rules

Matching Rule/OID

Attribute Syntax/OID

Description

uuidMatch/ 1.3.6.1.1.16.2

UUID/ 1.3.6.1.1.16.1

Compares an asserted UUID with a stored UUID attribute value for equality

RFC 4530

uuidOrderingMatch/ 1.3.6.1.1.16.3

UUID/ 1.3.6.1.1.16.1

Compares the collation order of an asserted UUID with a stored UUID attribute value for ordering

RFC 4530

caseExactIA5Match/ 1.3.6.1.4.1.1466.109.114.1

IA5 String/ 1.3.6.1.4.1.1466.115.121.1.26

Compares an asserted value with an attribute value of International Alphabet 5 (IA5) syntax

RFC 4517

caseIgnoreIA5Match/ 1.3.6.1.4.1.1466.109.114.2

IA5 String/ 1.3.6.1.4.1.1466.115.121.1.26

Compares an asserted value with an attribute value of IA5 syntax

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

RFC 4517

caseIgnoreIA5SubstringsMatch/ 1.3.6.1.4.1.1466.109.114.3

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring with an attribute value of IA5 string syntax

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

RFC 4517

authPasswordExactMatch/ 1.3.6.1.4.1.4203.1.2.2

Authentication Password Syntax/ 1.3.6.1.4.1.4203.1.1.2

Authentication password exact matching rule

authPasswordMatch/ 1.3.6.1.4.1.4203.1.2.3

Authentication Password Syntax/ 1.3.6.1.4.1.4203.1.1.2

Authentication password matching rule

ds-mr-double-metaphone-approx/ 1.3.6.1.4.1.30221.1.4.1

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Syntax based on the phonetic Double Metaphone algorithm for approximate matching

ds-mr-user-password-exact/ 1.3.6.1.4.1.30221.1.4.2

User Password Syntax/ 1.3.6.1.4.1.30221.1.3.1

User password exact matching rule

ds-mr-user-password-equality/ 1.3.6.1.4.1.30221.1.4.3

User Password Syntax/ 1.3.6.1.4.1.30221.1.3.1

User password equality matching rule

historicalCsnOrderingMatch/ 1.3.6.1.4.1.30221.1.4.4

1.3.6.1.4.1.30221.1.3.5

Compares the collation order of a historical change sequence number with a historical Change Sequence Number (CSN) attribute value

caseExactIA5SubstringsMatch/ 1.3.6.1.4.1.30221.1.4.902

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring with an attribute value of IA5 string syntax

RFC 4517

compactTimestampMatch/ 1.3.6.1.4.1.30221.2.4.1

Compact Timestamp/ 1.3.6.1.4.1.30221.2.3.1

Compact Timestamp matching rule

compactTimestampOrderingMatch/ 1.3.6.1.4.1.30221.2.4.2

Compact Timestamp/ 1.3.6.1.4.1.30221.2.3.1

Compares the collation order of a compact timestamp number with an attribute value of Compact Timestamp syntax

objectIdentifierMatch/ 2.5.13.0

OID/ 1.3.6.1.4.1.1466.115.121.1.38

Compares an asserted value with an attribute value of OID syntax

RFC 4517

distinguishedNameMatch/ 2.5.13.1

DN/ 1.3.6.1.4.1.1466.115.121.1.12

Compares an asserted value with an attribute value of distinguished name (DN) syntax

Spaces around commas and semicolons are ignored. Spaces around plus and equal signs around relative distinguished name (RDN) components are ignored.

RFC 4517.

caseIgnoreMatch/ 2.5.13.2

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares an asserted value with an attribute value

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

RFC 4517

caseIgnoreOrderingMatch/ 2.5.13.3

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares the collation order of the asserted string with an attribute value of Directory String syntax

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

RFC 4517

caseIgnoreSubstringsMatch/ 2.5.13.4

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring value with an attribute value of Directory String syntax

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

RFC 4517

caseExactMatch/ 2.5.13.5

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares an asserted value with an attribute value of Directory String syntax

RFC 4517

caseExactOrderingMatch/ 2.5.13.6

Directory String 1.3.6.1.4.1.1466.115.121.1.15

Compares the collation order of the asserted string with an attribute value of Directory String syntax

RFC 3698

caseExactSubstringsMatch/ 2.5.13.7

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring with an attribute value of Directory String syntax

RFC 3698

numericStringMatch/ 2.5.13.8

Numeric String/ 1.3.6.1.4.1.1466.115.121.1.36

Compares an asserted value with an attribute value of Numeric String syntax. Spaces are ignored when performing these comparisons

RFC 4517.

numericStringOrderingMatch/ 2.5.13.9

Numeric String/ 1.3.6.1.4.1.1466.115.121.1.36

Compares the collation order of the asserted string with an attribute value of Numeric String syntax

Spaces are ignored when performing these comparisons.

RFC 4517

numericStringSubstringsMatch/ 2.5.13.10

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring with an attribute value of Numeric String syntax

Spaces are ignored when performing these comparisons.

RFC 4517

caseIgnoreListMatch/ 2.5.13.11

Postal Address/ 1.3.6.1.4.1.1466.115.121.1.41

Compares an asserted value with an attribute value, which is a sequence of Directory Strings

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

RFC 4517

caseIgnoreListSubstringsMatch/ 2.5.13.12

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares the asserted substring with an attribute value, which is a sequence of Directory Strings

Case, leading, and trailing spaces are ignored. Multiple spaces are treated as a single space.

RFC 3698

booleanMatch/ 2.5.13.13

Boolean/ 1.3.6.1.4.1.1466.115.121.1.7

Compares an asserted boolean value with an attribute value of BOOLEAN syntax

Returns true if the values are both TRUE or both FALSE.

RFC 3698

integerMatch/ 2.5.13.14

Integer/ 1.3.6.1.4.1.1466.115.121.1.27

Compares an asserted value with an attribute value of INTEGER syntax

RFC 4517

integerOrderingMatch/ 2.5.13.15

Integer/ 1.3.6.1.4.1.1466.115.121.1.27

Compares the collation order of the asserted integer with an attribute value of Integer syntax

Returns true if the attribute value is less than the asserted value.

RFC 3698

bitStringMatch/ 2.5.13.16

Bit String/ 1.3.6.1.4.1.1466.115.121.1.6

Compares an asserted Bit String value with an attribute value of Bit String syntax

RFC 4517

octetStringMatch/ 2.5.13.17

Octet String/ 1.3.6.1.4.1.1466.115.121.1.40

Compares an asserted value with an attribute value of octet string syntax using a byte-for-byte comparison

RFC 4517

octetStringOrderingMatch/ 2.5.13.18

Octet String/ 1.3.6.1.4.1.1466.115.121.1.40

Compares the collation order of the asserted octet string with an attribute value of Octet String syntax

Zero precedes a one bit. Shorter strings precede longer strings.

RFC 3698

octetStringSubstringsMatch/ 2.5.13.19

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted substring with an attribute value of octet string syntax using a byte-for-byte comparison

RFC 4517

telephoneNumberMatch/ 2.5.13.20

Telephone Number/ 1.3.6.1.4.1.1466.115.121.1.50

Compares an asserted value with an attribute value of Telephone Number syntax

RFC 4517

telephoneNumberSubstringsMatch/ 2.5.13.21

Substring Assertion/ 1.3.6.1.4.1.1466.115.121.1.58

Compares an asserted value with the substrings of an attribute value of Telephone Number String syntax

RFC 4517

presentationAddressMatch/ 2.5.13.22

Presentation Address/ 1.3.6.1.4.1.1466.115.121.1.43

Compares an asserted value with an attribute value of Presentation Address syntax

RFC 4517

uniqueMemberMatch/ 2.5.13.23

Name and Optional UID/ 1.3.6.1.4.1.1466.115.121.1.34

Compares an asserted value with an attribute value of Unique Member syntax

RFC 4517

protocolInformationMatch/ 2.5.13.24

Protocol Information/ 1.3.6.1.4.1.1466.115.121.1.42

Compares an asserted value with an attribute value of Protocol Information syntax

RFC 4517

generalizedTimeMatch/ 2.5.13.27

Generalized Time/ 1.3.6.1.4.1.1466.115.121.1.24

Compares an asserted value with an attribute value of Generalized Time syntax

RFC 4517

generalizedTimeOrderingMatch/ 2.5.13.28

Generalized Time 1.3.6.1.4.1.1466.115.121.1.24

Compares the collation order of the asserted string with an attribute value of Generalized Time String syntax and case is ignored

RFC 4517

integerFirstComponentMatch/ 2.5.13.29

Integer/ 1.3.6.1.4.1.1466.115.121.1.27

Equality matching rules for subschema attributes between an Integer syntax and the value syntax

RFC 4517

objectIdentifierFirstComponentMatch/ 2.5.13.30

OID/ 1.3.6.1.4.1.1466.115.121.1.38

Equality matching rules for subschema attributes between an OID syntax and the value syntax

RFC 4517

directoryStringFirstComponentMatch/ 2.5.13.31

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares an asserted Directory String value with an attribute value of type SEQUENCE whose first component is mandatory and of type Directory String

Returns true if the attribute value has a first component whose value matches the asserted Directory String using the rules of caseIgnoreMatch.

RFC 3698.

wordMatch/ 2.5.13.32

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares an asserted word with any word in the attribute value for equality

RFC 3698

keywordMatch/ 2.5.13.33

Directory String/ 1.3.6.1.4.1.1466.115.121.1.15

Compares an asserted value with any keyword in the attribute value for equality

RFC 3698