Is OpenLDAP support attributes with null values?

Question

Is there any way to create LDAP attribute with null values? Because in our environment our custom application will update the value of that attribute.

An LDAP attribute with nothing but a null value is empty, or absent. The API doesn't distringuish between these two conditions. If the attribute is defined in the schema for the object class, and you have permission, you can set it, whether absent, empy, present, ... — user207421, Apr 06 '18 at 05:48

score 1 · Answer 1 · edited Apr 06 '18 at 08:03

1

As EJP said, no value in an attribute means the attribute is absent (or to be deleted with some update operations).

Some syntaxes, such as IA5String, support a value that is an empty string. But this is not the case for DirectoryString which is the most used syntax for attribute values.

edited Apr 06 '18 at 08:03

user207421

305,947
44
307
483

answered Apr 06 '18 at 07:57

Ludovic Poitou

4,788
2
21
30

score 0 · Answer 2 · answered Aug 16 '19 at 14:24

0

The answer might be too late for you! There is an overlay in OpenLDAP Gold Edition that automatically gets rid of empty string values for the DirectoryString syntax.

answered Aug 16 '19 at 14:24

Tamim Ziai

1

Is OpenLDAP support attributes with null values?

2 Answers2