HP-UX Directory Server Administrator Guide HP-UX Directory Server Version 8.1 (5900-3098, May 2013)

directory trees. For example, spaces between the RDN components is not allowed, but the practise
of usage is allowed since they were allowed in the previous specification outlined in RFC 1779.
A configuration attribute nsslapd-dn-validate-strict is provided to deal with the special
circumstances around validation of the DN syntax. This configuration attribute ensures that the
value strictly adheres to the rules defined in RFC 4514, section 3 if it is set to on. If it is set to off,
the server will normalize the value before checking it for syntax violations.
By default, strict DN syntax validation is set to off. To enable it, use ldapmodify or edit the
dse.ldif file.
ldapmodify -D "cn=directory manager" -w secret \
–h server.example.com -p 389
dn: cn=config
changetype: modify
replace: nsslapd-dn-validate-strict
nsslapd-dn-validate-strict: on
NOTE: Additional standard attribute syntaxes supported in this release are:
• Numeric String
• Bit String
• Delivery Method
• Enhanced Guide
• Facsimile Telephone Number
• Fax, Guide, Name And Optional UID
• Printable String
• Teletex Terminal Identifier
• Telex Number.
448 Managing the Directory Schema