RE: Filter Items and Absent Attributes

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

I think a very strong case can be made that (foo=bar) should
evaluate to False if foo is known, has an equality rule,
the assertion value conforms to the assertion syntax, and
the attribute (or its subtypes) does contain the value "bar".

In particular, X.511(93), 7.8.2 details conditions for which
any assertion about values is only defined.  IMO, the 
assertion meets the conditions.  7.8.2 also states that
filter items are evaluated as attribute value assertions.
X.501(93) states:

  An AVA is:
     a) undefined, if any of the following hold:
        1) the attribute type is unknown,
        2) the attribute type has no equality matching rule,
        3) the value does not conform to the data type indicated
           by the syntax of the assertion of the attribute?s
           equality matching rule;
     b) true, if the entry contains an attribute of that type,
        one of whose values matches that value;
     c) false, otherwise.

It appears that most server implementations in accordance
with this interpretation and not the 4th edition.

Kurt