ah, odd - I'm used to IPs being IA5. then the equality match should be changed? Can't have <meta http-equiv="content-type" content="text/html; charset=utf-8">caseIgnoreIA5Match on a directory string :) <div class="gmail_quote"> On Fri, Sep 24, 2010 at 9:30 AM, Dmitri Pal <<a href="mailto:dpal@redhat.com">dpal@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> <div><div></div><div class="h5">Brian LaMere wrote: > the attribute "hostMask" attribute in the 60sudo.ldif schema def has a > syntax of 1.3.6.1.4.1.1466.115.121.1.15 but it should be > 1.3.6.1.4.1.1466.115.121.1.26...maybe? > > attributeTypes: (2.16.840.1.113730.3.8.7.11 NAME 'hostMask' DESC 'IP > mask to identify a subnet.' EQUALITY caseIgnoreIA5Match ORDERING > caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX > 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v2' ) > > equality as IA5, but ordering and substr as regular strings? I'm > tempted to think it should be IA5 across the board, as an IP. Yes? > </div></div>Yes this is an inconsistency fixed by the patch on the list. After some discussion we decided to treat it as a DirectoryString i.e. 15 and remove the IA5 from the match rule. Thanks , Dmitri > ------------------------------------------------------------------------ > > _______________________________________________ > Freeipa-users mailing list > <a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> > <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? <a href="http://www.redhat.com/carveoutcosts/" target="_blank">www.redhat.com/carveoutcosts/</a> </blockquote></div>