At 09:58 AM 2001-08-27, Norbert Klasen wrote: >it seems there is a mismatch between length restrictions for standard attribute types as specified in X.520v3 and LDAPv3: In LDAPv3, the len value is a "suggested upper minimum bound", not a maximum length restriction. See last paragraph of RFC 2252, 4.3.2. Kurt