I recommend using globus_gsi_cert_utils_get_x509_name() to parse DN
strings in C code.
http://viewcvs.globus.org/viewcvs.cgi/gsi/cert_utils/source/library/globus_gsi_cert_utils.c?view=markup

In Java I suggest org.globus.gsi.gssapi.GlobusGSSName().
http://viewcvs.globus.org/viewcvs.cgi/jglobus/src/org/globus/gsi/gssapi/GlobusGSSName.java?root=Java+COG&view=markup

You don't need to escape '/' characters in grid-mapfiles.
It's OK to have '/' characters in DN component values.
For example, it's common to have "/CN=host/example.com" in DNs.

Andreas Maier wrote:
> Dear Globus Support,
> 
> Looking at http://dev.globus.org/wiki/Gridmap I still wonder how to escape a 
> slash in a DN.
> I've got a DN like
> 
> "/C=DE/O=Grid/OU=Universitaet Beispiel /OU=Department Chemie/ AK Etwas/CN=Dr. 
> Max Muster"
> 
> Is this a valid DN? I think the slash at ".. Chemie/ AK.." should be escaped, 
> shouldn't it?
> If it is valid, how is the rule to parse it? Are the only allowed attribute 
> types
> /C=, /O=, /OU=, /CN=, /DC=, /E=, /email=, /emailAddress=, /uid=, /userid= ?
> 
> Sincerely,
> Andreas Maier

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to