LDAP Result Codes
The result code an LDAP directory server returns on every operation, from the protocol standard rather than from Windows. A device that cannot bind to Active Directory reports one of these, and it says whether the credential was refused, the entry was absent, or the server declined.
This table decodes 57 codes.
SparkLogs decodes these codes on every event that carries one, regardless of feed. The Windows Application event log, Windows application platform event channels, Windows identity and security event channels, Windows management event channels, Windows network event channels, Windows platform event channels, Windows Security event log, Windows Setup event log, Windows storage event channels and Windows System event log feeds read these codes while curating an event.
How to read this
Codes are listed in numeric order. Name is the constant Windows publishes for the code. Token is the short label SparkLogs puts on the event, which is what a question groups by. The last column is our one-line summary of what the code means in plain words.
Codes 0 to 97
| Code | Name | Token | What it means |
|---|---|---|---|
0 | success | success | The operation completed. |
1 | operationsError | operations_error | The server could not carry out the operation in the sequence it was asked for. |
2 | protocolError | protocol_error | The request was malformed or violated the protocol. |
3 | timeLimitExceeded | time_limit_exceeded | The operation ran past the time limit in force. |
4 | sizeLimitExceeded | size_limit_exceeded | The result set was larger than the size limit in force. |
5 | compareFalse | compare_false | A compare completed and the asserted value did not match. |
6 | compareTrue | compare_true | A compare completed and the asserted value matched. |
7 | authMethodNotSupported | auth_method_not_supported | The server does not support the authentication method that was offered. |
8 | strongerAuthRequired | stronger_auth_required | The server requires a stronger form of authentication for this operation. |
9 | LDAP_PARTIAL_RESULTS | partial_results | The result set returned is incomplete and the response carries a referral to another server. |
10 | referral | referral | The server holds no answer and named other servers to ask. |
11 | adminLimitExceeded | admin_limit_exceeded | An administrative limit on the server was reached. |
12 | unavailableCriticalExtension | unavailable_critical_extension | A control the request marked critical is not available on the server. |
13 | confidentialityRequired | confidentiality_required | The server requires a confidential session for this operation. |
14 | saslBindInProgress | sasl_bind_in_progress | The server needs another round of the SASL exchange to finish the bind. |
16 | noSuchAttribute | no_such_attribute | The entry does not carry the attribute named. |
17 | undefinedAttributeType | undefined_attribute_type | The attribute type named is not defined in the schema. |
18 | inappropriateMatching | inappropriate_matching | The matching rule does not apply to the attribute it was used on. |
19 | constraintViolation | constraint_violation | The value breaks a constraint the schema or the server places on it. |
20 | attributeOrValueExists | attribute_or_value_exists | The attribute or the value being added is already present. |
21 | invalidAttributeSyntax | invalid_attribute_syntax | The value does not match the syntax the attribute is defined with. |
32 | noSuchObject | no_such_object | The entry named does not exist. |
33 | aliasProblem | alias_problem | An alias entry does not name an existing object. |
34 | invalidDNSyntax | invalid_dn_syntax | The distinguished name is malformed. |
36 | aliasDereferencingProblem | alias_dereferencing_problem | The alias could not be followed. |
48 | inappropriateAuthentication | inappropriate_authentication | The authentication offered is not appropriate for the identity claimed. |
49 | invalidCredentials | invalid_credentials | The credentials presented were refused. |
50 | insufficientAccessRights | insufficient_access_rights | The identity is not allowed to perform the operation. |
51 | busy | busy | The server is too busy to serve the request right now. |
52 | unavailable | unavailable | The server is shutting down or otherwise not serving requests. |
53 | unwillingToPerform | unwilling_to_perform | The server declines to perform the operation. |
54 | loopDetect | loop_detect | The server detected a loop while processing the request. |
64 | namingViolation | naming_violation | The name of the entry breaks the naming rules in force. |
65 | objectClassViolation | object_class_violation | The entry breaks the rules of its object classes. |
66 | notAllowedOnNonLeaf | not_allowed_on_non_leaf | The operation is only allowed on a leaf entry. |
67 | notAllowedOnRDN | not_allowed_on_rdn | The operation would remove part of the relative distinguished name. |
68 | entryAlreadyExists | entry_already_exists | An entry with that name already exists. |
69 | objectClassModsProhibited | object_class_mods_prohibited | Changing the object class of the entry is not allowed. |
71 | affectsMultipleDSAs | affects_multiple_dsas | The operation would span more than one directory server. |
80 | other | other | The server reported a failure it has no more specific code for. |
81 | LDAP_SERVER_DOWN | server_down | The client could not contact the directory server. |
82 | LDAP_LOCAL_ERROR | local_error | The client library failed on this machine rather than at the server. |
83 | LDAP_ENCODING_ERROR | encoding_error | The client could not encode the request it was asked to send. |
84 | LDAP_DECODING_ERROR | decoding_error | The client could not decode the response it received. |
85 | LDAP_TIMEOUT | client_timeout | The client gave up waiting before the server answered. |
86 | LDAP_AUTH_UNKNOWN | auth_unknown | The authentication attempt failed for a reason the client could not name. |
87 | LDAP_FILTER_ERROR | filter_error | The search filter is malformed. |
88 | LDAP_USER_CANCELLED | user_cancelled | The caller cancelled the operation. |
89 | LDAP_PARAM_ERROR | param_error | A parameter passed to the client call was not valid. |
90 | LDAP_NO_MEMORY | no_memory | The client ran out of memory. |
91 | LDAP_CONNECT_ERROR | connect_error | The client could not establish the connection. |
92 | LDAP_NOT_SUPPORTED | not_supported | The client does not support the feature the call asked for. |
93 | LDAP_CONTROL_NOT_FOUND | control_not_found | The response did not carry the control the call went looking for. |
94 | LDAP_NO_RESULTS_RETURNED | no_results_returned | The call returned no results. |
95 | LDAP_MORE_RESULTS_TO_RETURN | more_results_to_return | More results remain to be retrieved. |
96 | LDAP_CLIENT_LOOP | client_loop | The client detected a loop while following referrals. |
97 | LDAP_REFERRAL_LIMIT_EXCEEDED | referral_limit_exceeded | The chain of referrals ran past the limit the client allows. |
Ask about these codes
Connect your AI and ask in plain language, or open the same events in Explore.