Re: LDIF and structural objectclasses

[Michael Ströder <michael@stroeder.com>]

Daniel Tiefnig wrote:
>
> 1) Why are userpassword attributes always encoded in base64 in
> OpenLDAP2.x.x? e.g. "{crypt}c4jHzc08CN.ug" is a valid SAFE-STRING, but
> is encoded anyways.

I guess that's because userPassword is defined with SYNTAX 
1.3.6.1.4.1.1466.115.121.1.40 (Octet String) in OpenLDAP's schema.

Note that it's up to the LDIF creator which notation to use. Any attribute 
MAY be base64-encoded and your LDIF parser has to handle that.

If you wanna parse LDIF use an appropriate module for your favourite 
programming language which correctly handles all the stuff defined in 
RFC2849 (e.g. module ldif in package python-ldap...:-)

Ciao, Michael.