https://bz.apache.org/bugzilla/show_bug.cgi?id=63026
--- Comment #5 from Mark Thomas <ma...@apache.org> --- RFC 4514 (string representation of distinguished names) states that a space at the beginning or end of a string must be escaped (there are other escaping requirements but I am ignoring them for this discussion). Other characters may be escaped. Any character can be escaped with "\nn" sequences. Some characters may be escaped with "\" AD correctly escapes a space if it is the first or last character using "\ ". It appears that the additional escaping observed originates in Java. AD accepts queries using the same "\ " escaping it uses but does not accept any additional "\ " escaping. AD accepts queries that use optional "\nn" escaping. RFC 4145 (string representation of search filters) only refers to "\nn" escaping. I'm currently looking at options to address this issue. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org