Re: equal character forbidden in DN

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

Pierangelo Masarati writes:
>> My old openldap-2.1.26 accepts DNs with the '=' character in it. My
>> openldap-2.1.29 doesn't:
>>
>>
>> Example "dn: Document=254 Page=1-2,ou=data,dc=MyCompany"
>>
>>   dc=MyCompany
>>      ou=data
>>         Document=254 Page=1-2
> 
> If it does, then it is a bug; the correct form is
> 
> dn: Document=254 Page\=1-2,ou=data,dc=MyCompany

That's a bug in RFC 2253: Section 2.4 (ASN.1 DN => string) says '=' need
not be escaped, but section 3 (string => DN) says '=' must be escaped.
Unescaped '=' will be allowed in the upcoming revised LDAP spec,
see <http://www.ietf.org/internet-drafts/draft-ietf-ldapbis-dn-14.txt>.

> provided "Document" is a valid attribute type, (...)

-- 
Hallvard