Checking Valid Attribute Syntax

Directory Server allows you to check the integrity of your attributes whenever you perform the following operations:

• Importing data using dsadm import or dsconf import.

• Using LDAP or DSML to add entries, modify entries, or modify the DN of an entry.

The checks ensure that the attribute values conform to IETF recommendations. All nonconforming attributes are rejected and logged in the errors log. The log messages include the connection and operation ID, if applicable.

By default, the server does not automatically check the syntax of the previously mentioned operations. If you want to turn syntax checking on, use the following procedure.

To Turn On Automatic Syntax Checking

You cannot use DSCC to perform this task. Use the command line, as described in this procedure.

• To turn on automatic syntax checking, use this command:

  $ dsconf set-server-prop -h host -p port check-syntax-enabled:on