I referenced both the section 4.3 and 6.27 of the rfc2252 and tried the following:

(,l\5Fluke,mydomain.com) (,l_luke,mydomain.com) (,l'_'luke,mydomain.com (,l"_"luke,mydomain.com) (,(l'_'luke,mydomain.com) (,l"\5F"luke,mydomain.com) (,l"_"luke,mydomain.com) (,"l_luke",mydomain.com) (,'l_luke',mydomain.com)

However, none of the above worked. What is the correct way of doing the escape? Your help will be much appreciated!

Luke

----- Original Message ---- From: Dieter Kluenter dieter@dkluenter.de To: openldap-technical@openldap.org Sent: Wednesday, April 23, 2008 6:37:33 AM Subject: Re: AW: Invalid syntax (21)

Luke Lee leeluke77@yahoo.com writes:

Hi Claus,

Thank you for your valuable opinion.

I tried to "fix" the syntax problem by removing the _ from the username. It worked! However, I want to use the _ because this is my company's user naming convention. I have to point out that when I ran the early version of OpenLDAP (version 2.2-13), there were no syntax problems when I used the ldif with the nisNetgroupTriple that was defined. I just did a custom build of OpenLDAP (version 2.3-39). Then, I immediately encountered the invalid syntax problem when I triled to load the same ldif.

RFC-2307 defines the attribute elements of syntax 'keystring, keystring, as defined in rfc2252, does not allow underscores, if you do require underscores you may escape this character.

-Dieter