[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: Extensible Match Filters

[ldapext trimmed]

At 03:07 PM 2/8/01 +1100, Steven Legg wrote:
>I think the real problem Brent was alluding to is the fact that the ABNF
>for <extensible> in RFC 2254 only allows the thing after the `=' to be
>an AttributeValue, whereas it should be an AssertionValue.

Actually, the root of the problem is that the RFC 2254 copy of the
ASN.1 is incorrect!

RFC 2254:
        AttributeValueAssertion ::= SEQUENCE {
                attributeDesc   AttributeDescription,
                attributeValue  AttributeValue
        }

should be as in RFC 2251, 4.1.7:
        AttributeValueAssertion ::= SEQUENCE {
                attributeDesc   AttributeDescription,
                assertionValue  AssertionValue }


then:
   The AttributeValue and AssertionValue OCTET STRING have the form
   defined in [2].

need not refer to AttributeValue.

And, the ABNF should be:
       value      = AttributeValue from Section 4.1.6 of [1]

should be:
       value      = AssertionValue from Section 4.1.7 of [1]

That, I think, should fix this problem.

        Kurt