Re: [xacml-comment] A question about x500Name-equal

[Anne Anderson - Sun Microsystems <Anne.Anderson@Sun.COM>]

The order of RDNs IS significant:

   "CN=Satoshi,O=IBM" is NOT equal to "O=IBM,CN=Satoshi"

The order of attribute-value pairs within a single RDN,
however, is not significant, since the rules for comparing
X.500 names require that all AV pairs within a single RDN
be re-ordered according to a specific rule (lexicographic?)
prior to comparison.  Such AV pairs are separated with "+"
I believe.

Anne Anderson

"Satoshi Hada" <SATOSHIH@jp.ibm.com> wrote:
>Date: Mon, 03 Feb 2003 16:21:16 +0900
>Hi,
>
>I'm not familiar with X.500, and I have a question about the x500Name-equal
>function.
>Please tell me whehter the order of RDNs is sensitive or not when checking
>the equality of two X500 names.
>
>For example,
>is "CN=Satoshi,O=IBM" is equal to "O=IBM,CN=Satoshi" ?
>
>Satoshi Hada
>IBM Tokyo Research Laboratory
>mailto:satoshih@jp.ibm.com
>
>
>
>----------------------------------------------------------------
>To subscribe or unsubscribe from this elist use the subscription
>manager: <http://lists.oasis-open.org/ob/adm.pl>

Anne
------
Anne Anderson          Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
Burlington, MA         781-442-0928