[Date Prev][Date Next] [Chronological] [Thread] [Top]

zero-len RDNs



Hey all.
 
Recently I've encountered a problem where someone was able to add an entry with a zero length RDN, and then was not able to read the entry back. For example, this entry was created:
 
dn: cn=,o=bar
 
I'm trying to resolve which half of the problem is the real problem (allowing such an addition, or not being able to resolve the name) and have concluded that both X.501 and RFC 2253 allow you to create an entry with a zero length RDN.
 
Can anyone verify or dismiss this? It doesn't feel right, but I can't find anywhere in the spec's that disallow it.
 
Thanks.
 
Jim