Rich Megginson wrote: > Michael Str?der wrote: >> Rich Megginson wrote: >>> I think IA5String is case sensitive, and Directory String is case >>> insensitive. >> I don't think so (see section 4.2. of RFC 4517). > Ok. But the the way Fedora DS works is that it treats IA5String as case > sensitive, and Directory String as case insensitive - see > ldap/servers/plugins/syntaxes/ces.c and cis.c Hmm, but then the problem of the original poster is that the matching rule applied to an attribute value (based on your rule above) has nothing to with the normalization of the entry's RDN. Because he was asking about memberUid=steves vs. memberUid=Steves which are two different entries in his data (based on caseExactIA5Match) but are treated as the same entry in FDS. (Nevertheless he should get his data fixed for various reasons.) Ciao, Michael.