[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#5968) slapd accepts RDN cn=one+cn=two

Full_Name: Hallvard B Furuseth
Version: HEAD
OS: Linux
Submission from: (NULL) (
Submitted by: hallvard

slapd should reject this entry:
   dn: cn=one+cn=two,o=foo
   objectClass: organizationalRole
   cn: one
   cn: two
because an attribute type occurs multiple times in the same RDN.
See RFC 4512 section 2.2, last paragraph:
   "When an attribute is used for naming of the entry, one and only one
   value of the attribute is used in forming the Relative Distinguished
   Name.  This value is known as a distinguished value."