Full_Name: Kartik Subbarao Version: 2.4.41 OS: Ubuntu 14.4 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (173.75.228.155)

I have the constraint overlay configured to disallow space characters in the uid attribute. Normally this behaves as expected and rejects attributes with spaces, such as when I add this LDIF entry with ldapmodify:

dn: uid=test app@example,com,dc=example,dc=com objectClass: applicationProcess objectClass: llnwApplication uid: test app@example.com cn: test app description: This is a test

The constraint overlay properly rejects the add operation.

But if I leave out the 'uid' attribute, it bypasses the constraint overlay and adds the entry:

dn: uid=test app@example,com,dc=example,dc=com objectClass: applicationProcess objectClass: llnwApplication cn: test app description: This is a test

Looking at the source code, this behavior seems to happen because constraint_add() loops through the op->ora_e->e_attrs list, which the RDN attribute is absent from in this case.