Howard Chu wrote:
> The aci attribute is currently defined with a syntax of IA5
> This syntax only allows 7-bit characters. Now that the server has
> support for syntax validation, this would prevent one from using
> international characters in aci rules. This patch defines the aci
> attribute with the Directory String syntax, which allows any valid
> UTF8 character.
Y'know, LDAP/X.500 requires that existing schema items must never be
changed once they're in use. When you want to change something like
this, usually you must define a new attributeType with a new OID for
the purpose. Probably not so important given the history of schema
checking in this code, but an fyi...
Thanks. Yes, that was definitely a consideration, and we thought about
this quite a bit before making this decision. We only chose this route
because it was the least evil.