eclements@apple.com wrote:
Full_Name: Eric Clements Version: 2.4.26 OS: MacOS URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (17.193.15.131)
RFC 3062 Section 2.1 (authored by OpenLDAP) states that a password modify request may or may not be an LDAP DN, yet OpenLDAP backend requires a DN.
I'm not sure I understand why you've filed this ITS. The RFC doesn't specify that a server MUST support non-DN valued identities. It in fact says in Section 3:
If the server does not recognize provided fields or does not support the combination of fields provided, it SHALL NOT change the user password.
Clearly it is allowed for a server to reject identities if it doesn't recognize them.