Module classify 

Enums

Phase 🔒

Where in a rotation an LDAP failure happened, which decides what it says about the target.

Constants

RC_ADMIN_LIMIT_EXCEEDED 🔒

adminLimitExceeded: the operation exceeded a limit the server’s administrator set.

RC_BUSY 🔒

busy: the server is too busy to handle the operation now.

RC_INVALID_CREDENTIALS 🔒

invalidCredentials: the bind’s name or password is wrong. Active Directory also answers it for a locked-out or disabled account.

RC_UNAVAILABLE 🔒

unavailable: the server is shutting down, or a part it needs is offline.

Functions

classify_ldap_error 🔒

Transport failures are transient; directory decisions and TLS or configuration failures are permanent. Only a result code or a fixed kind reaches the detail, never the directory’s text, which can echo account names.

classify_result_code 🔒

Load shedding is transient; any other rejection is a decision the directory will repeat.

io_error_kind_name 🔒

is_tls_error 🔒

tokio-rustls reports a rejected certificate as io::Error(InvalidData, rustls::Error), which ldap3 forwards as Io. It must not be retried like a network fault: it needs an operator.

target_rejected 🔒

target_unreachable 🔒