On Feb 23, 2010, at 2:31 PM, Chris Leong wrote: > I am aware of this, but the syntax still seems ambiguous. The only way > I could find to tell if an LDIF file is a set of directory entries or > a set of changes is to see if there is a changetype possibly after > some controls. If the "dn-spec" is followed by a control or by a changerecord, the record is a ldif-change-record. Otherwise it's a ldif-attrval-record. There is a conflict between LDIF keywords and AttributeDescriptions. This issue was addressed (after the publication of RFC 2849) by reserving LDIF keywords in the LDAP descriptor registry for use in LDIF. With this, one shouldn't have an attribute called "control" or "changetype". If ever RFC 2849 is revised, a note concerning how LDIF parsers should distinguish change and content records could be added. Note: Discussion of LDIF standardization can be taken ldapext@xxxxxxxx mailing list. -- Kurt _______________________________________________ Ietf mailing list Ietf@xxxxxxxx https://www.ietf.org/mailman/listinfo/ietf