Ummm .. checking what RFC3687 (http://tools.ietf.org/html/rfc3687
in table included in chapter 3.2.2 it looks that
be also allowed for IA5String syntax (read section 22.214.171.124 in this same
So ... could it be a bug in slapd not allowing these set of matching
(including the "caseIgnoreOrderingMatch" one) to be defined for
IA5String syntax ???
Actually it looks that RFC4517 does not exclude it. Text in
section 4.2.12 (in this RFC4517) says:
The caseIgnoreOrderingMatch rule compares an assertion value of the
Directory String syntax to an attribute value of a syntax (e.g., the
Directory String, Printable String, Country String, or Telephone
Number syntax) whose corresponding ASN.1 type is DirectoryString or
one of its alternative string types.
IA5String syntax is NOT mentioned into that "e.g." list ... but is it
excluded ? Is it not IA5String syntax another DirectoryString's
type as it is PrintableString syntax?
BR / Antonio
org] On Behalf Of Antonio Alonso
Sent: jueves, 25 de junio de 2009 21:41
To: masarati(a)aero.polimi.it; openldap-technical(a)openldap.org
Subject: RE: Case Ignore Ordering matching rule for IA5 String sysntax ?
OK ... we will check that approach.
Do you know if it was something forgotten in the RFC4517 ?... it
sounds really odd (to me) that PrintableString (that is a subset of
IA5String) and DirectoryString (that is a superset) are allowed syntaxis
for "caseIgnoreOrderingMatch" ... but IA5String is not allowed to use it
(maybe I am missunderstanding/mixing things ....???)
Thanks a lot
BR / Antonio
From: masarati(a)aero.polimi.it [mailto:email@example.com]
Sent: jueves, 25 de junio de 2009 21:25
To: Antonio Alonso
Subject: Re: Case Ignore Ordering matching rule for IA5 String sysntax ?
We are trying to define (in our own ldap schema) an IA5String
attribute type that is required to be managed (from our ldap clients)
as "case insensitive"
"greaterOrEqual" and "lessOrEqual" filters are required to be
managed over this attribute, so we wanted to assigne (in its attribute
type definition) an ORDERING matching requesting "case
According to RFC4517 (http://tools.ietf.org/html/rfc4517
) there is
NO any ordering Matching Rule for IA5String syntax AND case
tried with the "caseIgnoreOrderingMatch" .. but slapd returns and
error (at schema
loading) as attribute type syntax (IA5String) is not allowed for this
"ordering match rule"
We checked that defining the attribute as
is a valid matching rule for that sysntax according to RFC4517) ...
but we are really interested in IA5String syntax ....
Does openLDAP server technolgy provide a "case insensitive ordering
match" method for IA5String syntax ?
No. It doesn't because there's no standard track definition for it.
However, there's nothing preventing OpenLDAP software from supporting
this non-standard track feature. Adding custom matching rules is