No code change, added a comment warning of a possible future difficulty.

Apparently, we refuse to index ;binary attributes.  That is mostly
bogus.  Whether it is indexable or not depends on whether we know how
to or not, nothing more.  I.e., the existance of indexer and filter
functions for the matching rules that are relevant to the attribute
type.

diff --git a/servers/slapd/value.c b/servers/slapd/value.c
index 3d4e05acd6fd282894e80fd155c16081a67a6c0e..0508b3590dd5681d59e3d85daf6cfedcc7384493 100644 (file)
--- a/servers/slapd/value.c
+++ b/servers/slapd/value.c
@@ -87,6 +87,7 @@ value_normalize(
        }
 
        /* we only support equality matching of binary attributes */
+       /* This is suspect, flexible certificate matching will hit this */
        if( slap_ad_is_binary( ad ) && usage != SLAP_MR_EQUALITY ) {
                *text = "inappropriate binary matching";
                return LDAP_INAPPROPRIATE_MATCHING;