I referenced both the section 4.3 and 6.27 of the rfc2252 and tried the following:

 

(,l\5Fluke,mydomain.com)

(,l\_luke,mydomain.com)

(,l'\_'luke,mydomain.com

(,l"_"luke,mydomain.com)  

(,(l'_'luke,mydomain.com)

(,l"\5F"luke,mydomain.com)

(,l"\_"luke,mydomain.com)

(,"l_luke",mydomain.com)

(,'l_luke',mydomain.com)

 

However, none of the above worked. What is the correct way of doing the escape? Your help will be much appreciated!

 

Luke

----- Original Message ----
From: Dieter Kluenter <dieter@dkluenter.de>
To: openldap-technical@openldap.org
Sent: Wednesday, April 23, 2008 6:37:33 AM
Subject: Re: AW: Invalid syntax (21)

Luke Lee <leeluke77@yahoo.com> writes:

> Hi Claus,
> 
> Thank you for your valuable opinion.
> 
> I tried to "fix" the syntax problem by removing the _ from the username. It
> worked! However, I want to use the _ because this is my company's user naming
> convention. I have to point out that when I ran the early version of OpenLDAP
> (version 2.2-13), there were no syntax problems when I used the ldif with the
> nisNetgroupTriple that was defined. I just did a custom build of OpenLDAP
> (version 2.3-39). Then, I immediately encountered the invalid syntax problem
> when I triled to load the same ldif.

RFC-2307 defines the attribute elements of syntax 'keystring,
keystring, as defined in rfc2252, does not allow underscores, if you
do require underscores you may escape this character.

-Dieter 

--
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6