Re: allowed characters CN

[a...@novell.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All of those characters are allowed, though the underscore is the biggest
problem child. If you can avoid using it I would definitely recommend
doing so.

Other than that use any character you like from an 'a' to a ':'... it
really does not matter. dots are only a problem when using NDAP (because
they must be escaped) but commas become an issue when using LDAP (because
they must be escaped). In all of my objects I avoid non-alphanumeric
characters, which I extend to mean hyphens (-) are allowed.

Good luck.

sveldhuisen wrote:
> I have a question regarding best practices for allowed characters in the
> CN. I need to store an object with a compound key as CN (key1 key2
> key3), but the keys itself can contain the characters "-_#". So the
> obvious delimiters aren't available.
>
> I need to pick a good delimiter that doesn't give me a headache in
> future development (like for example the dot). I can't find any best
> practices, so I hope the good old forums can help me a hand.
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=CW8G
-----END PGP SIGNATURE-----

[David Gersic]

On Tue, 08 Dec 2009 19:46:02 +0000, sveldhuisen wrote:

> I have a question regarding best practices for allowed characters in the
> CN. I need to store an object with a compound key as CN (key1 key2
> key3), but the keys itself can contain the characters "-_#". So the
> obvious delimiters aren't available.

Are you _sure_ that there won't ever be a "key4" in this scheme? Why not
just multi-value the CN, instead?

--
---------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Novell Knowledge Partner http://forums.novell.com

Please post questions in the newsgroups. No support provided via email.