Does the LDAP protocol limit the length of a DN

Question

Does the LDAP protocol specify a maximum length that a DN can take?

I've looked through https://www.rfc-editor.org/rfc/rfc4514 but I can't find any restrictions that it imposes.

Answer 1

No, it doesn't seem to be specified explicitly anywhere - and the Active Directory implementation also doesn't impose a max length on the DN syntax (2.5.5.1).

Marc

Answer 2

Most implementations of LDAP DN's usually hit 256 characters, which I think comes from X.500 still. After all X.500 defines the DAP, and LDAP is the Lightweight DAP protocol.

Answer 3

According to that reply to a similar question, ActiveDirectory limits the DN length to 255 characters.