| Previous | Next |
| ERROR_DS_SINGLE_VALUE_CONSTRAINT | ERROR_DS_ATT_VAL_ALREADY_EXISTS |
ERROR_DS_RANGE_CONSTRAINT
The value violates rangeLower or rangeUpper constraints
Active Directory attribute definitions can carry lower and upper range constraints. Their interpretation depends on the attribute syntax: for string-like values the range commonly constrains length, while other syntaxes can use schema-specific bounds. This result means the submitted value cannot be stored under the range rules of the target attributeSchema object.
Validate the raw value sent over LDAP rather than only the formatted value shown by an administration tool. Encoding, normalization, or generated prefixes can change the value that reaches the server. Also verify that the client is reading schema from the same forest or AD LDS instance that processes the write; a hard-coded limit copied from another directory is not authoritative.
What to inspect
- Read
rangeLower,rangeUpper, and the attribute syntax from the schema. - Measure or parse the value according to that syntax before retrying.
- Do not truncate identifiers or security-sensitive values merely to make the request pass.
References
Looking for a different code? Search another status or error code.