Re: LDAPprep Failure was: Re: LDAPprep: mapping of " " values

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

Let's see - attribute values that fail LDAPprep...

* cannot coexist with other values in the same attribute,

* cannot be removed by naming the value, only the entire attribute,

* cannot be (successfully) searched for or compared with,

* probably cannot be used in RDNs - the alternative would be a mess like
  they can exist in the RDN but one cannot look up the entry by its DN
  (since that involves comparing the supplied DN with the entry's DN),
  and maybe not add the entry if another entry exists with the same
  parent (since one must check if the other entry has the same name),

* can mess up a replication scheme which checks if a value is already
  present by EQUALITY-comparing the new value with the old value,

* cannot be named as individual values in access controls, if such
  controls use the EQUALITY rule to check if access is allowed,

* cannot be sorted by the ORDERING rule.

Anything else?

-- 
Hallvard