Hey all.
Recently I've encountered a problem where someone was able to add an entry
with a zero length RDN, and then was not able to read the entry back. For
example, this entry was created:
dn: cn=,o=bar
I'm trying to resolve which half of the problem is the real problem
(allowing such an addition, or not being able to resolve the name) and have
concluded that both X.501 and RFC 2253 allow you to create an entry with a zero
length RDN.
Can anyone verify or dismiss this? It doesn't feel right, but I can't find
anywhere in the spec's that disallow it.
Thanks.
Jim
|