LDAP V3 - SINGLE-VALUE attribute (ITS#497)

[paulcun@sco.com]

Full_Name: Paul Cunningham
Version: openldap-2_0-alpha3
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (150.126.24.200)


If the schema definition for an attribute is SINGLE-VALUE the slapd
seems to allow objects to be modified such that they have more than one
value for that attribute. The attrbute definition used is given below:

attribute ( 2.2.7 NAME 'isConfiguredByDirectory'
            DESC 'When true indicates that the physical object that is
                 being referenced is manageable through the directory.'
            SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

The schema checking flag in slapd.conf (schemacheck on) is set on.

Is this a bug or am I doing something wrong, the main page defines an
attribute as:
   attribute ( <oid> [NAME <name>] [DESC  <description>]
              [OBSOLETE]          [SUP  <oid>]  [EQUALITY  <oid>]
              [ORDERING  <oid>] [SUBSTR <oid>]  [SYNTAX <oidlen>]
              [SINGLE-VALUE] [COLLECTIVE]  [NO-USER-MODIFICA-
              TION] [USAGE <attributeUsage>] )

Thanks