On Tue, Feb 21, 2023 at 05:32:01PM +0100, Ede Wolf wrote: > Hello Ondřej, > > Thanks very much! That is exactly the anwer I have been looking for - even > more so in fact, as additionally I have been educated, that the dn is a > different part from the rest of the ldif. Makes sense, but I've never really > thought of this before.
Correction: the dn is the same as anything else in the LDIF, it is the server that then does extra processing on the text it receives because its syntax is a DN, just like a 'member' attribute, 'seeAlso' and others like them will allow you to do the same - they are of the distinguished name syntax. Or like with the 'cn' attribute you can write 'TEST' or 'tEst' and they will be considered equivalent, because its syntax says so, not because the client did anything. Regards, -- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP
