| Previous | Next |
| ERROR_DS_COMPARE_FALSE | ERROR_DS_AUTH_METHOD_NOT_SUPPORTED |
ERROR_DS_COMPARE_TRUE
Compare true confirms one assertion, not read access to the attribute set
ERROR_DS_COMPARE_TRUE is the positive result of an LDAP Compare operation. It means the asserted value matched at least one value of the specified attribute under the server’s matching rules. It does not return the attribute, prove that it is single-valued, or authorize the caller to read other values or properties on the entry.
Use Compare when the application needs a narrowly scoped server-side assertion without downloading a potentially multivalued attribute. Preserve the exact DN, attribute, assertion representation, and domain controller when the outcome is security-relevant. Do not treat a true result as a durable condition: another writer can modify the entry immediately afterward. If the comparison is meant to guard an update, use an assertion control or another atomic directory operation rather than a separate compare-then-modify sequence that is vulnerable to races.
Limits of a positive comparison
- The single assertion that was evaluated.
- Matching rule implied by the attribute syntax.
- Time and server that produced the result.
- Atomic control required for any dependent update.
References
- Microsoft: ldap_compare_s result semantics
- Microsoft: asynchronous Compare and result retrieval
- IETF RFC 4511: Compare operation semantics
Looking for a different code? Search another status or error code.