[DIRSERVER-1696] Creation of an entry like cn=test1+cn=test2, ou=system should not be allowed

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.0-M5
• Fix Version/s: 2.0.0-M6
• Assignee: Unassigned
• Reporter: Emmanuel Lécharny
• Created: 16/Feb/12 15:15
• Updated: 17/Feb/12 22:11
• Resolved: 17/Feb/12 22:11

Description

Currently, we can create an entry like :
dn: cn=test1+cn=test2,ou=system
objectClass: person
cn: test1
cn: test2
sn: Test

This is not allowed by X501, as explained in par 9.3 :

"The set that forms an RDN contains exactly one AttributeTypeAndDistinguishedValue for each attribute which contains distinguished values in the entry; that is, a given attribute type cannot appear twice in the same RDN."