Hi all,

I hope that this will lead to some discussion on better utf-8 support.

It seems that ldapsearch does'n like dn's with utf-8 chars in it. see:

$ ldapsearch -xLLL "(uid=dwrc)" dn dn:: Y249RMW1ciBDeW1ydSxvdT11c2VyQWNjb3VudHMsZGM9Y3NpcnQsZGM9amFuZXQ=

$ locale LANG=en_GB.UTF-8 LC_CTYPE="en_GB.UTF-8" LC_NUMERIC="en_GB.UTF-8" LC_TIME="en_GB.UTF-8" LC_COLLATE="en_GB.UTF-8" LC_MONETARY="en_GB.UTF-8" LC_MESSAGES="en_GB.UTF-8" LC_PAPER="en_GB.UTF-8" LC_NAME="en_GB.UTF-8" LC_ADDRESS="en_GB.UTF-8" LC_TELEPHONE="en_GB.UTF-8" LC_MEASUREMENT="en_GB.UTF-8" LC_IDENTIFICATION="en_GB.UTF-8" LC_ALL=

add -u and doesn't get much better: ufn: D\C5\B5r Cymru, userAccounts, csirt.janet

While 'getent passwd' via libnss-ldap is more then happy with utf-8 usernames:

$ getent passwd dwrc:*:1111:100:Dŵr Cymru:/tmp:/bin/bash

(for those that have issues with utf-8 email, the 'w' in Dwr has a hat '^' on).

I am told on the irc channel that anything 'strange' is changed to base64. Some thoughts on this:

* I don't consider UTF-8 to be strange.

* If it really has to be this way then ldap* -D args (and others) should accept the base64 form.

* This behaviour should at least have an off switch, so the user can decide on the output form.

I was asked to post this issue to the list for discussion. My own position is that I have yet to hear any good reason why utf-8 support should not be a goal.

Regards,

Thorben