Hi Si,

sorry, it took a little longer ;-))

On Tuesday, 22. May 2007 19:13, Si Smith wrote:
> Something I have noticed recently, when trying to
> write into an AD using the microsoft tools is that
> they are fussy on the "-\n" delimiter after each
> attribute in a modify record.  This seems to have
> to be there (for AD/ADAM) even if there is only one attribute change.
>
> Naturally using the perl LDAP libraries to read and
> update the directory works OK.  The only reason I
> was using a Microsoft tool was for kerberos authentication
> without trying to get GSSAPI working on Win32.
>
> RFC2849 indicates that mod-spec should include the "-"
> separator?

Have you tried using the version => 1 option of Net::LDAP::LDIF->new()?
See the Net::LDAP::LDIF manual page for details.

> Net::LDAP::LDIF  v0.17 (line 538 on) does not write a "-\n" if there is
> only one attribute value change. I think perhaps it should.

It does if version => 1 is set (line 551 in current CVS).

Regards
Peter

-- 
Peter Marschall
[EMAIL PROTECTED]

Reply via email to