Invalid Add operations allowed (ITS#2243)

[rganesan@vsnl.net]

Full_Name: Ganesan R
Version: 2.1.9
OS: Debian GNU/Linux 3.0
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (128.107.253.38)


Hi,

All versions of openldap allow the creation of a dn with a cn attribute even if
the objectclass doesn't include a cn. For example, I can add the following
object without an error.

---
dn: cn=mycountry,dc=mycompany,dc=com
objectclass: country
c: mycountry
---

In case of a locality, which does not even locality as a MUST attribute, 
the following ldif can be added successfully.

---
dn: cn=mylocality,dc=mycompany,dc=com
objectclass: locality
---

This bug exists for any objectclass that doesn't have cn as a must attribute.
You can also add a locality without specifying 'l' in the list of attributes, 
since l is not a MUST attribute. I don't know if LDAP allows creation of
an object with no attribute being present for the RDN.

---
dn: l=mylocality,dc=mycompany,dc=com
objectclass: locality
---

Ganesan