Re: equal character forbidden in DN

["Pierangelo Masarati" <ando@sys-net.it>]

> My old openldap-2.1.26 accepts DNs with the '=' character in it. My
> openldap-2.1.29 doesn't:
>
>
> Example "dn: Document=254 Page=1-2,ou=data,dc=MyCompany"
>
>   dc=MyCompany
>      ou=data
>         Document=254 Page=1-2

If it does, then it is a bug; the correct form is

dn: Document=254 Page\=1-2,ou=data,dc=MyCompany

provided "Document" is a valid attribute type, which I don't
believe, since it's an objectClass name (from cosine.schema):

objectclass ( 0.9.2342.19200300.100.4.6 NAME 'document'
        SUP top STRUCTURAL
        MUST documentIdentifier
        MAY ( commonName $ description $ seeAlso $ localityName $
                organizationName $ organizationalUnitName $
                documentTitle $ documentVersion $ documentAuthor $
                documentLocation $ documentPublisher )
        )

In fact, with latest 2.2:

slapdn 'Document=254 Page=1-2,ou=data,dc=MyCompany'
DN: <Document=254 Page=1-2,ou=data,dc=MyCompany> check failed 21 (Invalid
syntax)

slapdn 'Document=254 Page\=1-2,ou=data,dc=MyCompany'
DN: <Document=254 Page\=1-2,ou=data,dc=MyCompany> check failed 21 (Invalid
syntax)

slapdn 'cn=254 Page=1-2,ou=data,dc=MyCompany'
DN: <cn=254 Page=1-2,ou=data,dc=MyCompany> check failed 21 (Invalid syntax)

slapdn 'cn=254 Page\=1-2,ou=data,dc=MyCompany'
DN: <cn=254 Page\=1-2,ou=data,dc=MyCompany> check succeeded
normalized: <cn=254 page\=1-2,ou=data,dc=mycompany>
pretty:     <cn=254 Page\=1-2,ou=data,dc=MyCompany>

see RFC 2253 for details.

p.

>
> do_add
> ber_scanf fmt ({m) ber:
>>>> dnPrettyNormal: <Document=254 Page=1-2,ou=data,dc=MyCompany>
> => ldap_bv2dn(Document=254 Page=1-2,ou=data,dc=MyCompany,0)
> <= ldap_bv2dn(Document=254 Page=1-2,ou=data,dc=MyCompany,0)=84
> do_add: invalid dn (Document=254 Page=1-2,ou=data,dc=MyCompany)
> send_ldap_result: conn=0 op=1 p=3
> send_ldap_result: err=34 matched="" text="invalid DN"
> send_ldap_response: msgid=2 tag=105 err=34
> ber_flush: 24 bytes to sd 10
> conn=0 op=1 RESULT tag=105 err=34 text=invalid DN
>
> Is the equal character behind "Page" not allowd by spec or is the
> openldap-2.1.29 broken in this point?
>
> Regards,
> Hendrik
>
> --
> ----------------------------------------------------
>       Hendrik Harms
>       TOJAQ Datentechnik GmbH
>
>       for Volkswagen AG
>       K-DOB-46  IS Purchasing
>
>


-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497