Overview#ModifyResponse is a LDAP Message sent in response to a to an Modify Request as a LDAP Result which will include a Modify Response as defined as follows:
ModifyResponse ::= [APPLICATION 7] LDAPResult
Upon receipt of a Modify Request, the DSA attempts to perform the necessary modifications to the DIB and returns the result in a Modify Response. The DSA will return to the client a single Modify Response indicating either the successful completion of the DIB modification, or the reason that the modification failed.
Due to the requirement for atomicity in applying the list of modifications in the Modify Response, the DUA may expect that no modifications of the DIT have been performed if the Modify Response received indicates any sort of error, and that all requested modifications have been performed if the Modify Response indicates successful completion of the Modify Request. Whether or not the modification was applied cannot be determined by the DUA if the Modify Response was not received (e.g., the LDAP session was terminated or the Modify operation was abandoned).
DSA MUST ensure that entries conform to user and system schema rules or other data model constraints. The Modify operation cannot be used to remove from an entry any of its distinguished values, i.e., those values which form the entry's Relative Distinguished Name (RDN). An attempt to do so will result in the server returning the LDAP_NOT_ALLOWED_ON_RDN LDAP Result Code. The ModifyDNRequest is used to rename an entry.
Note that due to the simplifications made in LDAP, there is not a direct mapping of the changes in an LDAP ModifyRequest onto the changes of a DAP ModifyEntry operation, and different implementations of LDAP-DAP gateways may use different means of representing the change. If successful, the final effect of the operations on the entry MUST be identical.