LDAP backend TODO: Determine the real behaviour of DN+String and DN+Binary

[Stefan (metze) Metzmacher]

Am 22.10.2010 05:58, schrieb Andrew Bartlett:
> Anatoliy,
> 
> The next big task, as I mentioned on mumble yesterday, for us to do on
> the OpenLDAP backend is to correctly test and implement the DN+String
> and DN+Binary matching rules.
> 
> Once we have positive tests for these rules, then we can ask the
> OpenLDAP team to implement them, but we want to make sure we ask once,
> for the right thing (I may have already muddied the waters here, so I
> want to try again once, with the right info).
> 
> The things we need to find out are:
> 
> If I search on a DN+String attribute, does it match against the DN, or
> the DN+String.   Likewise for the DN+Binary.
> 
> If I attempt to add a duplicate DN+String value to an attribute, does it
> conflict (only unique values allowed in LDAP) based on the DN, or the DN
> +String.  Likewise for DN+Binary.

There's also documentation about this, see [MS-ADTS] 3.1.1.2.2 Syntaxes.

Basicaly we need to prove the documentation with tests.

We should also try things like specify all possible matching rules,
explicit in the search request and use them for unrelated attributes.
E.g. use a Interger matching rule for a dn attribute.

Section 3.1.1.2.2.4 Supported Comparison Operations show most of it.
We need tests to prove that specified things work and the unspecified
things don't work.

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20101022/96d76548/attachment.pgp>