Re: It is possible to have a suffix "dn=domain.com"

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

While you can certainly stuff any sequence of octets into
any attribute that the value syntax allows, the semantics
of the attribute may not be well defined for all possible
sequences.

So, while values of DC can be any IA5 string, only certain
IA5 strings are domain components (DNS labels).  If you stuff
IA5 strings which don't represent domain components into the
attribute, applications may be behave in unexpected manner.

Kurt

At 03:30 PM 2002-12-04, Gustavo Lozano wrote:
>Hello.
>
>I want to know if is it possible to have a suffix just like
>
>suffix    "dc=domain.com"
>
>instead
>
>suffix    "dc=domain,dc=com"
>
>
>The issue here, is I already have the suffix like dc=domain.com working,
>and everything work but the ldapdelete functions....
>
>Lets see a sample:
>
>First ldapsearch to find the dn and then ldapdelete to trash it:
>
>bash# ldapsearch uid=test dn
>version: 2
>
>#
># filter: uid=test
># requesting: dn 
>#
>
># test, domain.com
>dn: uid=test,dc=domain.com
>
># search result
>search: 2
>result: 0 Success
>
># numResponses: 2
># numEntries: 1
>
>
>Now lets delete it:
>
>bash# ldapdelete -Duid=root,dc=domain.com -W
>Enter LDAP Password: 
>dn:uid=test,dc="domain.com"
>Delete Result: Invalid DN syntax (34)
>Additional info: invalid DN
>
>
>But ldapadd and ldapmodify works!!
>
>Thanks a lot in advance for any answer with help :)
>
>Rgds
>
>Gustavo
>
>
>
>
>-- 
>_________________                                 __________________