Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Message-ID: <20672350.1154725575687.JavaMail.jira@brutus>
Date: Fri, 4 Aug 2006 14:06:15 -0700 (PDT)
From: "Stefan Zoerner (JIRA)" <jira@apache.org>
To: dev@directory.apache.org
Subject: [jira] Commented: (DIRSERVER-696) Adding entries with RDNs enclosed
 in quotes may lead to entries with illegal DNs
In-Reply-To: <15864686.1154719395410.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

    [ http://issues.apache.org/jira/browse/DIRSERVER-696?page=comments#action_12425857 ] 
            
Stefan Zoerner commented on DIRSERVER-696:
------------------------------------------

Here is an addition to the issue. If authorization is enabled before th import, and an ACI is attached to dc=example,dc=com, it is not possible to add the entries at all (this is how I originally found the problem). The authorization subsystem seems to have problems with the illegal DNs, as Softerra LDAP Administrator has after the creation.

> Adding entries with RDNs enclosed in quotes may lead to entries with illegal DNs
> --------------------------------------------------------------------------------
>
>                 Key: DIRSERVER-696
>                 URL: http://issues.apache.org/jira/browse/DIRSERVER-696
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 1.0-RC4
>         Environment:     *  ApacheDS 1.0 RC4 SNAPSHOT
>     * Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_07-b03)
>     * Windows XP Professional SP2
>            Reporter: Stefan Zoerner
>         Attachments: quotesEntries.ldif
>
>
> Using ApacheDS 1.0 RC4 SNAPSHOT with server.xml unchanged.
> If I try to add something like this
> dn: ou="Scissors 8<",dc=example,dc=com
> ou: "Scissors 8<"
> objectclass: organizationalUnit
> objectclass: top
> an entry is created like that (quotes missing)
> dn: ou=Scissors 8<,dc=example,dc=com
> ou: Scissors 8<
> objectclass: organizationalUnit
> objectclass: top
> This causes a lot of trouble in some tools I use (LDAP Administrator, for instance). I checked the behaviour of IBM Tivoli Directory Server 6.0 and Sun Java System Directory Server 5.2. They behave different, but both create entries with valid DNs:
> Sun:
> dn: ou="Scissors 8<",dc=example,dc=com
> ou: "Scissors 8<"
> ou: Scissors 8<
> objectClass: organizationalUnit
> objectClass: top
> IBM:
> dn: ou=Scissors 8\<,dc=example,dc=com
> ou: "Scissors 8<"
> ou: Scissors 8<
> objectclass: organizationalUnit
> objectclass: top
> I add an LDIF file with this entry and comparable entries, which cause the same error.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira