(ITS#5785) dontUseCopy in slapd requires criticality to be TRUE

[ando@sys-net.it]

Full_Name: Pierangelo Masarati
Version: HEAD/re24
OS: irrelevant
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (82.63.140.131)
Submitted by: ando


The "dontUseCopy" control requires criticality to be TRUE.  While this is the
desirable value, a DUA could use the control with the criticality set to FALSE.

For full conformance with RFC4511, if the control is syntactically well-formed
and criticality is set to FALSE, slapd MUST accept it if recognized, or MUST
ignore it if not recognized, but CANNOT question the fact that the value of
criticality is violating the control's specification.

p.

PS: other controls with similar requirements for the DUA accept any value for
criticality (e.g. RFC4370).