Re: Problem with names that include ","

[Michael S. <mi...@st...>]

Yves Dorfsman wrote:
> Christoph Holtermann wrote:
> 
>> I am working on a filter that makes Thunderbirds LDIF-Output
>> importable to OpenLDAP. It works quite fine except for names
>> that include ",". OpenLDAP dislikes the output that is produced
>> like :
>>
>> dn: cn=Lehmann\, Veronika,dc=Adressbuch,dc=christoph
> 
> Escaping characters is used by some LDAP servers, not all of them, but is 
> not conform to LDIF.

Yves, that sounds wrong to me.

According to RFC 4514 a comma within a RDN value has to either be
escaped with \ or converted to hex-escaped value.  That's what function
ldap.dn.escape_dn_chars() is for. And you can directly use the result in
LDIF.

Ciao, Michael.