(ITS#5968) slapd accepts RDN cn=one+cn=two

[h.b.furuseth@usit.uio.no]

Full_Name: Hallvard B Furuseth
Version: HEAD
OS: Linux
URL: 
Submission from: (NULL) (129.240.6.233)
Submitted by: hallvard


slapd should reject this entry:
   dn: cn=one+cn=two,o=foo
   objectClass: organizationalRole
   cn: one
   cn: two
because an attribute type occurs multiple times in the same RDN.
See RFC 4512 section 2.2, last paragraph:
   "When an attribute is used for naming of the entry, one and only one
   value of the attribute is used in forming the Relative Distinguished
   Name.  This value is known as a distinguished value."