User Schema: Country Attribute

[Andrew Sciberras <andrew.sciberras@eB2Bcom.com>]

Hi,

I'd like to query our definition of the country attribute.

The LDAP definition of the attribute, is:
( 2.5.4.6 NAME 'c' SUP name SINGLE-VALUE )

Whilst X.520 uses:
countryName ATTRIBUTE   ::= {
    SUBTYPE OF          name
    WITH SYNTAX         PrintableString (SIZE (2))
    SINGLE VALUE        TRUE
    ID                  { 2 5 4 6 }
}

In our implementation, we use the X.520 definition, where the syntax of 
the attribute is PrintableString(SIZE (2)).  In other words, the LDAP 
definition of a CountryString.

My concerns here are generally consistency based, in the sense that we 
should not be changing the definitions of any X.500 defined attributes.

Generally, this difference should not cause any interoperability issues 
between LDAP and X.500 applications, but there are instances where it 
could.

Andrew Sciberras.