HI! I'm looking closer at the attribute type descriptions in kerberos.schema (schema file for OpenLDAP shipped by openSUSE package krb5-plugin-kdb-ldap-1.13-154.2.x86_64).
For some attribute types with IA5Syntax there's defined: SUBSTR caseExactSubstringsMatch IMHO this is wrong. It has to be: SUBSTR caseExactIA5SubstringsMatch Where to file a ticket? Ciao, Michael. ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos