Overview#
EQUALITY Matching Rules are used to determine whether one attribute value is equal to another. The determination is generally made based on the normalized value, and ignores insignificant differences (e.g., differences in capitalization or extra spaces).
Two values of an attribute are considered equivalent if and only if they would match according to the equality matching rule of the attributeTypes.
Common examples of EQUALITY Matching Rules include:#
- booleanMatch
- caseExactMatch
- caseExactSubstringsMatch
- caseIgnoreMatch
- caseIgnoreSubstringsMatch
- distinguishedNameMatch
- generalizedTimeMatch
- integerMatch
- octetStringMatch
- telephoneNumberMatch rule is used for equality comparisons. While RFC 2252 defines telephoneNumberMatch as a whitespace-insensitive comparison only, ...
More Information#
There might be more information for this subject on one of the following:- 2.16.840.1.113719.1.1.4.1.96
- 2.16.840.1.113719.1.1.5.1.15
- ACL (eDirectory Attribute)
- ARecord
- AccountExpires
- AccountNameHistory
- AdministrativeRole
- AdministratorsAddress
- AliasedObjectName
- AllowedAttributesEffective
- AltServer
- ApproxMatch
- Assistant
- AssociatedDomain
- AssociatedInternetGateway
- AssociatedName
- Attribute Value Assertion
- AttributeSecurityGUID
- AttributeSyntax
- AttributeTypes
- Audio
- Automount
- AutomountInformation
- AutomountKey
- AutomountMapName
- BackLink
- BirthDate
- BirthName
- BitStringMatch
- BooleanMatch
- BuildingName
- CarLicense
- Case Ignore List
- Case-insensitive
- Case-sensitive
- CaseExactMatch
- CaseExactOrderingMatch
- CaseExactSubstringsMatch
- CaseIgnoreListMatch
- CaseIgnoreMatch
- ChangeNumber
- ChangeType
- Changelog
- Changes
- City
- ClassDisplayName
- Cn
- Co
- CollectiveAttributeSubentries
- CollectiveExclusions
- Company
- Country-Code
- CountryName
- CountryOfResidence
- CreateTimestamp
- DC
- DITContentRules
- DITStructureRules
- DateOfBirth
- DefaultHidingValue
- DefaultObjectCategory
- DeleteOldRDN
- DepartmentNumber
- Description
- DetectIntruder
- DhcpDomainName
- DhcpRelayAgentInfo
- DirXML-ApplicationSchema
- DirXML-Associations
- DirXML-ConfigValues
- DirXML-DriverFilter
- DirXML-DriverStartOption
- DirXML-EntitlementRef
- DirXML-JavaDebugPort
- DirXML-NTAccountName
- DirXML-NamedPasswords
- DirXML-PasswordSyncStatus
- DirXML-ShimAuthPassword
- DirXML-State
- DirectReports
- DirectoryStringFirstComponentMatch
- DisplayName
- Distinguished Names
- DistinguishedNameMatch
- DomainComponent
- DomainControllerFunctionality
- DomainFunctionality
- DsRevision
- DxPwdFailedTime
- DxPwdHistory
- DxPwdLastChange
- DxPwdLocked
- DxPwdLoginTime
- DxPwdMustChange
- EDirCloneLock
- EQUALITY
- EmailAddress
- EmployeeNumber
- EnhancedSearchGuide
- EntryDN
- EntryFlags
- EntryUUID
- Equality SearchFilter
- EqualityMatch
- EquivalentToMe
- Etag
- ExtendedCharsAllowed
- FacsimileTelephoneNumber
- ForestFunctionality
- FullName
- GUID
- Gecos
- Gender
- GeneralizedTimeMatch
- GidNumber
- GivenName
- GroupType
- HomeDirectory
- HomePhone
- HostResourceName
- HttpSessionTimeout
- IndexDefinition
- Initials
- IntegerFirstComponentMatch
- IntegerMatch
- IntruderLockoutResetInterval
- IpProtocolNumber
- IpServicePort
- IpServiceProtocol
- IsDefunct
- IsDeleted
- IsEphemeral
- IsRecycled
- JpegPhoto
- L
- LDAP Entry
- LDAP Three-valued logic
- LDAPAdminLimits
- LabeledUri
- Language
- LanguageId
- LdapGroupDN
- LdapPermissiveModify
- LdapServerIdleTimeout
- LdapStdCompliance
- LegacyExchangeDN
- LinkID
- LocalEntryID
- LocalReceivedUpTo
- LockedByIntruder
- LockoutAfterDetection
- LoginAllowedTimeMap
- LoginDisabled
- LoginExpirationTime
- LoginIntruderAddress
- LoginIntruderAttempts
- LoginIntruderLimit
- LoginMaximumSimultaneous
- LoginShell
- MacAddress
- ManagedBy
- Manager
- MapiID
- MatchingRule
- Member
- MemberNisNetgroup
- MemberOf
- MemberQueryURL
- MemberUid
- Memory
- Mobile
- ModifiersName
- Modify Response
- ModifyTimestamp
- MsDS-AdditionalSamAccountName
- MsDS-Approx-Immed-Subordinates
- MsDS-HasInstantiatedNCs
- MsDS-LockoutDuration
- MsDS-LockoutObservationWindow
- MsDS-LockoutThreshold
- MsDS-MaximumPasswordAge
- MsDS-MinimumPasswordAge
- MsDS-MinimumPasswordLength
- MsDS-PSOAppliesTo
- MsDS-PasswordComplexityEnabled
- MsDS-PasswordHistoryLength
- MsDS-PasswordReversibleEncryptionEnabled
- MsDS-PasswordSettingsPrecedence
- MsDS-PhoneticCompanyName
- MsDS-PhoneticDepartment
- MsDS-SupportedEncryptionTypes
- MsDS-TrustForestTrustInfo
- MsDS-User-Account-Control-Computed
- NDSPKIKeyMaterialDN
- NDSRightsToMonitor
- Name
- NameForms
- NamingContext
- NdsStatusLimber
- NdspkiIssueTime
- NetworkAddress
- NewRDN
- NewSuperior
- NickName
- NisDomain
- NisMapEntry
- NisMapName
- NisNetgroupTriple
- NspmAdminsDoNotExpirePassword
- NspmComplexityRules
- NspmConfigurationOptions
- NspmDoNotExpirePassword
- NspmExtendedCharactersAllowed
- NspmMaximumLength
- NspmPassword
- NspmPasswordACL
- NspmPasswordHistory
- NspmPasswordHistoryExpiration
- NspmPasswordHistoryLimit
- NspmPasswordKey
- NspmPasswordPolicyDN
- NspmPolicyAgentAIX
- NumSubordinates
- NumericString
- NumericStringMatch
- OMObjectClass
- OMSyntax
- Obituary
- ObituaryNotify
- Object ACL
- ObjectClass
- ObjectClasses
- ObjectGUID
- ObjectIdentifierFirstComponentMatch
- ObjectSID
- OctetStringMatch
- Ou
- Owner
- PartitionStatus
- PasswordExpirationInterval
- PasswordExpirationTime
- PasswordMinimumLength
- PasswordsUsed
- Path Field
- Photo
- PhysicalDeliveryOfficeName
- PlaceOfBirth
- PostalCode
- PreferredServerList
- PresentationAddress
- PrimaryGroupID
- ProxyAddresses
- PurgeVector
- PwdAccountLockedTime
- PwdAllowUserChange
- PwdAttribute
- PwdChangedTime
- PwdEndTime
- PwdExpireWarning
- PwdFailureCountInterval
- PwdFailureTime
- PwdGraceAuthNLimit
- PwdGraceExpiry
- PwdGraceUseTime
- PwdHistory
- PwdInHistory
- PwdLastSuccess
- PwdLockout
- PwdLockoutDuration
- PwdMaxAge
- PwdMaxDelay
- PwdMaxFailure
- PwdMaxIdle
- PwdMinAge
- PwdMinDelay
- PwdMustChange
- PwdPolicySubEntry
- PwdProperties
- PwdReset
- PwdSafeModify
- PwdStartTime
- QueryPolicyObject
- Queue
- RdnAttId
- Ref
- Reference
- Replica
- ReplicaUpTo
- Resolution_AttrubuteType
- Revision
- SASLoginSecretKey
- SamAccountName
- SambaLMPassword
- SchemaFlagsEx
- ScriptPath
- SearchFlags
- SearchGuide
- SecurityEquals
- SeeAlso
- SerialNumber
- ServerHolds
- ServiceDNSName
- ShadowExpire
- ShadowFlag
- ShadowInactive
- ShadowLastChange
- ShadowMax
- ShadowMin
- ShadowWarning
- SslEnableMutualAuthentication
- StateOrProvinceName
- Street
- SubordinateCount
- SubschemaSubentry
- SupportedGroupingTypes
- SupportedLDAPVersion
- SupportedSASLMechanisms
- SynchronizedUpTo
- System-Id-Guid
- SystemFlags
- Tagged Name
- TargetDN
- TelephoneNumber
- TelephoneNumberMatch
- Timezone
- TokenGroups
- TombstoneLifetime
- TransitiveVector
- TypedName
- Uid
- UidNumber
- UnderstandingMatchingRuleUses
- UniqueIdentifier
- UniqueMember
- UnixHomeDirectory
- UnknownBaseClass
- User
- UserCertificate
- UserPrincipalName
- UsnChanged
- VendorName
- WhenChanged
- X500UniqueIdentifier
- shadowLastChange