[DIRSERVER-1311] Entry with an escaped comma in DN not found in searches with some filters

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.5.4
• Fix Version/s: 1.5.5
• Environment: Windows XP; Java(TM) SE Runtime Environment (build 1.6.0_10-b33); ApacheDS 1.5.4
• Assignee: Stefan Seelmann
• Reporter: Stefan Zoerner
• Created: 09/Feb/09 20:28
• Updated: 14/Dec/10 12:37
• Resolved: 05/May/09 18:30

Description

I use an out of the box ApacheDS 1.5.4 with server.xml unchanged, context entry for dc=example,dc=com created.

Adding the following entry is successful (LDIF import)

dn: cn=Amos\,Tori,dc=example,dc=com
sn: Amos
objectClass: person
objectClass: top
cn: Tori Amos

If I perform searches, some find it, for instance:

$ ldapsearch -D "uid=admin,ou=system" -w secret -h localhost -p 10389 -b "dc=example,dc=com" -s one "(objectclass=person)"
version: 1
dn: cn=Amos\,Tori,dc=example,dc=com
objectClass: person
objectClass: top
cn: Tori Amos
cn: Amos\,Tori
sn: Amos
$

But the following fails (no entry found):

$ ldapsearch -D "uid=admin,ou=system" -w secret -h localhost -p 10389 -b "dc=example,dc=com" -s one "(cn=Amos,Tori)"
$

According to Open Group's compliance tests, it should return the entry. I have tried to verify this by reading RFC 2253 and RFC 4514, esacping with a bachslash is allowed (I am not 100% certain about the filter ...).

Note that this one here does not return an entry either.

$ ldapsearch -D "uid=admin,ou=system" -w secret -h localhost -p 10389 -b "dc=example,dc=com" -s one "(cn=Amos\,Tori)"
$