Re: Error searching DNs with escaped special characters

[Nikita Bige <big_nikita@mtu-net.ru>]

Hellp all,
My problem based on the same (imho) bug.
Description:
I am trying to make certificates store how described in:
draft-ietf-pkix-ldap-ac-schema-01.txt
draft-ietf-pkix-ldap-crl-schema-01.txt
draft-klasen-ldap-x509certificate-schema-03-beta
There are the atribute x509issuer 
attributetype   ( 1.3.6.1.4.1.10126.1.5.3.4
     NAME 'x509issuer'
     DESC 'Distinguished name of the entity who has signed and
           issued the certificate or CRL'
     EQUALITY distinguishedNameMatch
     SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
     SINGLE-VALUE )

And everething were ok and worked till i try to add entry with  DN containing 
special characters.
>       ",", "+", """, "\", "<", ">", ";"
The following error were occured
ldap_add: Invalid DN syntax (34)
        additional info: invalid DN

example:
I trying to add entry with issuer =CN=test "sa" df,C=RU
And I have made escaping according to RFC2253, but this doesn't work 
dn: x509issuer=CN=test \"sa\" sadf\,C=RU,O=ca
[bla bla bla]
And this doesn`t work too!
dn: x509issuer=CN=test \22sa\22 sadf\,C=RU,O=ca

May be anyone know how to add DN with such charecters???
P.S. My attempt to debug slapd were detect the function from which the error 
returned:
getdn.c: str2strval

 } else if ( LDAP_DN_NEEDESCAPE( p[ 0 ] ) ) {
                        /*
                         * FIXME: maybe we can add
                         * escapes if not pedantic?
                         */
                        return( 1 );
                }
Thanks!
------ 
Wbr
Nikita
-----------------------

On Thursday 17 July 2003 20:34, Ken Turley wrote:
> Hello to all,
>
> I am experiencing inconsistencies when searching for DNs that contain the
> following escaped special characters:
>
>       ",", "+", """, "\", "<", ">", ";"
>
> (ref. Section 3 of RFC 2253 at
> http://www.faqs.org/rfcs/rfc2253.htmldefines)
>
> ********************************
> I'm running:
>   OpenLDAP 2.1.16
>   Back-sql (MS SQL Server 2000)
> ********************************
[....]
> Ken Turley
> Invizeon Corp.