perl-ldap-dev

spaces before a backslash in DNs

[Norbert K. <nor...@da...>]

Hi,
anybody knows why the regex in ldap_explode_dn doesn't match these?

CN=3DJohn Smith \, III,DC=3Dexample,DC=3Dnet
CN=3DJohn Smith \2C III,DC=3Dexample,DC=3Dnet


--=20
Norbert Klasen, Dipl.-Inform.
DAASI International GmbH                 phone: +49 7071 29 70336
Wilhelmstr. 106                          fax:   +49 7071 29 5114
72074 T=FCbingen                           email: nor...@da...
Germany                                  web:   http://www.daasi.de

Re: spaces before a backslash in DNs

[Graham B. <gb...@po...>]

Yes, change the line in the pattern from

      (?:[^\\",=+<>\#;]*[^\\",=+<>\#;\s]|\\(?:[\\ ",=+<>#;]|[0-9a-fA-F]{2}))*

to

      (?:[^\\",=+<>\#;]*[^\\",=+<>\#;\s]|\s*\\(?:[\\ ",=+<>#;]|[0-9a-fA-F]{2}))*

I have added these to the test suite

Graham.


On Sat, Apr 27, 2002 at 04:51:24PM +0200, Norbert Klasen wrote:
> Hi,
> anybody knows why the regex in ldap_explode_dn doesn't match these?
> 
> CN=John Smith \, III,DC=example,DC=net
> CN=John Smith \2C III,DC=example,DC=net
> 
> 
> -- 
> Norbert Klasen, Dipl.-Inform.
> DAASI International GmbH                 phone: +49 7071 29 70336
> Wilhelmstr. 106                          fax:   +49 7071 29 5114
> 72074 Tübingen                           email: nor...@da...
> Germany                                  web:   http://www.daasi.de
> 
> 
> 

Re: spaces before a backslash in DNs

[Chris R. <chr...@me...>]

Graham Barr <gb...@po...> wrote:
> Yes, change the line in the pattern from
> 
>       (?:[^\\",=+<>\#;]*[^\\",=+<>\#;\s]|\\(?:[\\
> ",=+<>#;]|[0-9a-fA-F]{2}))*
> 
> to
> 
>       (?:[^\\",=+<>\#;]*[^\\",=+<>\#;\s]|\s*\\(?:[\\
> ",=+<>#;]|[0-9a-fA-F]{2}))*
> 
> I have added these to the test suite
> 
> Graham.
> 
> 
> On Sat, Apr 27, 2002 at 04:51:24PM +0200, Norbert Klasen wrote:
>> Hi,
>> anybody knows why the regex in ldap_explode_dn doesn't match these?
>> 
>> CN=John Smith \, III,DC=example,DC=net
>> CN=John Smith \2C III,DC=example,DC=net

Here's another example of a tricky DN that might be worth testing:

distinguishedNameTableKey=cn\=DSA\, c\=GB, cn=bilateral table, cn=DSA, c=US

(The syntax of distinguishedNameTableKey is DistinguishedName, for the
curious.)

Cheers,

Chris

Re: spaces before a backslash in DNs

[Graham B. <gb...@po...>]

On Tue, Apr 30, 2002 at 01:59:58PM +0100, Chris Ridd wrote:
> Here's another example of a tricky DN that might be worth testing:
> 
> distinguishedNameTableKey=cn\=DSA\, c\=GB, cn=bilateral table, cn=DSA, c=US

canonical_dn turns that into

DISTINGUISHEDNAMETABLEKEY=cn\3dDSA\2c c\3dGB,CN=bilateral table,CN=DSA,C=US

Graham.

Re: spaces before a backslash in DNs

[Chris R. <chr...@me...>]

Graham Barr <gb...@po...> wrote:
> On Tue, Apr 30, 2002 at 01:59:58PM +0100, Chris Ridd wrote:
>> Here's another example of a tricky DN that might be worth testing:
>> 
>> distinguishedNameTableKey=cn\=DSA\, c\=GB, cn=bilateral table, cn=DSA,
>> c=US
> 
> canonical_dn turns that into
> 
> DISTINGUISHEDNAMETABLEKEY=cn\3dDSA\2c c\3dGB,CN=bilateral
> table,CN=DSA,C=US
> 
> Graham.
> 

Looks about right. If we want to be *really* awkward, we could have
multiple nested DNs.

dntk=dntk\=cn\\=DSA\\,c\\=GB\,dc\=example\,dc\=com,dc=foo,dc=net

Assuming I've got all the quoting right :-)

Cheers,

Chris

Re: spaces before a backslash in DNs

[Norbert K. <nor...@da...>]

--On 30 April 2002 14:26 +0100 Chris Ridd <chr...@me...>=20
wrote:

> Looks about right. If we want to be *really* awkward, we could have
> multiple nested DNs.

This can actually be useful. In=20
draft-klasen-ldap-x509certificate-schema-00.txt we propose a schema were=20
X.509 certificates are stored in separate entries below an end entity=20
entry. The RDN of such an entry is then formed by serialNumber+issuer.

--=20
Norbert Klasen, Dipl.-Inform.
DAASI International GmbH                 phone: +49 7071 29 70335
Wilhelmstr. 106                          fax:   +49 7071 29 5114
72074 T=FCbingen                           email: nor...@da...
Germany                                  web:   http://www.daasi.de