nsslapd-return-exact-case

- return exact case

Description

Returns the exact case of attribute names, as defined in the schema.

Attribute names are case-insensitive by default. However, when an attribute is returned by Directory Server. as the result of a search operation, some client applications require attribute names to match the case of the attribute as it is listed in the schema. Other client applications require attribute names to be returned in lower case.

nsslapd-return-exact-case is enabled by default. You should disable this attribute if you have legacy clients that expect attribute names to be returned in lower case for backward compatibility with Directory Server 4.x. You must stop and restart the server for changes to this attribute to be taken into account.

Note that if the attribute name is specified in the search, it is returned in the case in which it is specified, regardless of the value of nsslapd-return-exact-case.

For example, the following search command:

ldapsearch -b "cn=config" -s base objectclass=* "PassWordMinAGe"

Returns the attribute as PassWordMinAGe=0, whether nsslapd-return-exact-case is set to on or off.

If nsslapd-return-exact-case is set to on, the following search command:

ldapsearch -b "cn=config" -s base objectclass=*

Returns the attribute as passwordMinAge=0, which is how this attribute is defined in the schema.

If nsslapd-return-exact-case is set to off, the same search command:

ldapsearch -b "cn=config" -s base objectclass=*

Returns the attribute as passwordminage=0, in lower case.

Entry DN

cn=config

Valid Range

on | off

Default Value

on

Syntax

DirectoryString

Example

nsslapd-return-exact-case: on

Attributes

See attributes(5) for descriptions of the following attributes:

See Also

dse.ldif(4)