NULL vs. zero length DATA_BLOB's in LDAP

[Luke Howard]

>The issue is, as you noted, that GENSEC does not yet possess this
>distinction.  The only way I found to communicate the 'zero length' was
>to have a DATA_BLOB with a valid, non-NULL data element, but zero
>length.  (Traditional NULL/0 blobs being indicitive on NULL).
>
>In short, the way to make this work right is to change gensec_update
>everywhere.  

See:

http://www.openldap.org/its/index.cgi/Incoming?id=2994

... discusses this issue WRT LDAP/SASL.

-- Luke

--