Viewing Incoming/5399
Full headers

Major security issue: yes  no

Notes:
skipped because it has no validator (why?) patch welcome
Notification:

Date: Fri, 29 Feb 2008 11:56:08 GMT
From: michael@stroeder.com
To: openldap-its@OpenLDAP.org
Subject: LDAP Syntax 1.3.6.1.4.1.1466.115.121.1.58 (Substring Assertion) not listed in subschema subentry

Full_Name: Michael Str.der
Version: HEAD
OS: 
URL: 
Submission from: (NULL) (84.163.114.177)


Although implemnted since 2.0 the LDAP Syntax with 1.3.6.1.4.1.1466.115.121.1.58
(Substring Assertion) is not listed in subschema subentry.

Followup 1

Cc: <openldap-its@OpenLDAP.org>
From: Kurt Zeilenga <kurt@OpenLDAP.org>
To: michael@stroeder.com
Subject: Re: (ITS#5399) LDAP Syntax 1.3.6.1.4.1.1466.115.121.1.58 (Substring Assertion) not listed in subschema subentry
Date: Fri, 29 Feb 2008 07:37:18 -1000

On Feb 29, 2008, at 1:56 AM, michael@stroeder.com wrote:

> Full_Name: Michael Str.der
> Version: HEAD
> OS:
> URL:
> Submission from: (NULL) (84.163.114.177)
>
>
> Although implemnted since 2.0 the LDAP Syntax with  
> 1.3.6.1.4.1.1466.115.121.1.58
> (Substring Assertion) is not listed in subschema subentry.

IIRC, it's not listed because it only to be used in certain  
(extensible) matching rules cases and slapd(8) doesn't support any of  
those cases.

I noticed that this came up because someone was trying to use this  
syntax an attribute description.  That attribute description is likely  
bogus.

Followup 2

Date: Sat, 01 Mar 2008 16:12:06 +0100
From: Pierangelo Masarati <ando@sys-net.it>
To: kurt@openldap.org
CC: openldap-its@openldap.org,
        =?ISO-8859-1?Q?michael_Str=F6der?=
 <michael@stroeder.com>
Subject: Re: (ITS#5399) LDAP Syntax 1.3.6.1.4.1.1466.115.121.1.58 (Substring
 Assertion) not listed in subschema subentry

kurt@OpenLDAP.org wrote:

> IIRC, it's not listed because it only to be used in certain  
> (extensible) matching rules cases and slapd(8) doesn't support any of  
> those cases.

Technically, I note it's skipped by syn_schema_info() because it has no
validator (like many other known syntaxes).  I don't recall the reason
of this behavior, though.  Perhaps it could be relaxed.

p.



Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
---------------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Email:   pierangelo.masarati@sys-net.it
---------------------------------------