| Previous | Next |
| ERROR_DS_DS_REQUIRED | ERROR_DS_NON_BASE_SEARCH |
ERROR_DS_INVALID_LDAP_DISPLAY_NAME
lDAPDisplayName is a protocol identifier, not a localized label
ERROR_DS_INVALID_LDAP_DISPLAY_NAME means the schema name supplied for an attribute or class cannot be used as an LDAP descriptor. The value is the identifier clients place in filters, requested attribute lists, and modify operations; it is separate from cn, displayName, or an administrator-facing description.
Use an ASCII descriptor that follows the directory naming rules, remains stable after deployment, and does not collide with an existing class or attribute name. Avoid spaces, punctuation chosen for presentation, non-ASCII letters, and names whose case-only difference is intended to distinguish another schema element. Validate the name in the LDIF source before importing it and keep vendor or organization prefixes where appropriate. Renaming a deployed base-schema identifier is restricted, and changing a custom identifier later can break queries, security descriptors, scripts, and application mappings.
Name validation checklist
- Proposed lDAPDisplayName as exact ASCII bytes.
- Existing classSchema and attributeSchema names.
- cn and displayName values kept separate from the LDAP identifier.
- Applications or filters that will persist the name.
References
- Microsoft: naming attributes and classes
- Microsoft: lDAPDisplayName as a client identifier
- IETF RFC 4512: LDAP descriptors and schema definitions
Looking for a different code? Search another status or error code.