JNDI LDAP Response Parsing Problems

Question

Help!
I am having problems dealing with LDAP responses using JNDI 1.2.2 with the
LDAP SPI.
It seems that the detinguished name is unparsable but as far as I can see
the server output is fine. Any clues how to get around this? Have I done
something wrong or is the LDAP spi unusably buggy?
Please could you also reply in mail as this is an urgent matter for the
project I am working on. If the LDAP spi is unusable I will have to change
direction completely...
Thanks in advance,
John
The experimental code causing problems is this (except I have substituted
hard coded values that were bombing into the code):
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY,
"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://directory.verisign.com");
InitialLdapContext context_ldap = new InitialLdapContext(env, null);
Attributes match = new BasicAttributes(true);
match.put(new BasicAttribute("cn", "microsoft"));
NamingEnumeration enum = context_ldap.search("", match);
NameParser parser = context_ldap.getNameParser("");
while (enum.hasMore())
SearchResult result = (SearchResult)enum.next();
System.out.println("Parsing " + (result.isRelative() ? "[relative]: " :
"[non-relative]: ") + result.getName());
Name name = parser.parse(result.getName());
The output is this:
Parsing [relative]: "ou=MS INTERNAL TESTING
ONLY,cn=Microsoft,l=redmond,st=wa,c=US,ou=Digital ID Class 3 - Microsoft
Software Validation v2,ou=\"www.verisign.com/repository/CPS Incorp. by
Ref.,LIAB.LTD(c)96\",ou=VeriSign Commercial Software Publishers
CA,o=\"VeriSign, Inc.\",l=Internet"
javax.naming.InvalidNameException: Invalid name: "ou=MS INTERNAL TESTING
ONLY,cn=Microsoft,l=redmond,st=wa,c=US,ou=Digital ID Class 3 - Microsoft
Software Validation v2,ou=\"www.verisign.com/repository/CPS Incorp. by
Ref.,LIAB.LTD(c)96\",ou=VeriSign Commercial Software Publishers
CA,o=\"VeriSign, Inc.\",l=Internet"
at com.sun.jndi.ldap.LdapName$DnParser.parseAttrType(LdapName.java:478)
at com.sun.jndi.ldap.LdapName$DnParser.parseRdn(LdapName.java:432)
at com.sun.jndi.ldap.LdapName$DnParser.getDn(LdapName.java:400)
at com.sun.jndi.ldap.LdapName.parse(LdapName.java:303)
at com.sun.jndi.ldap.LdapName.<init>(LdapName.java:76)
at com.sun.jndi.ldap.LdapNameParser.parse(LdapNameParser.java:23)
at
com.softcomms.trackomatic.ext.ldap.gui.LDAPViewer$ResultsTableModel.parseRes
ult(LDAPViewer.java:304)
at
com.softcomms.trackomatic.ext.ldap.gui.LDAPViewer$1.run(LDAPViewer.java:240)
at com.softcomms.trackomatic.util.RunQueue.run(RunQueue.java:109)

Answer 1

at least you need cn= in front of the name.
Here some more questions you may ask yourself:
How do you know, that the requested object is in the database?
What is its DN?
Can you retrieve it using the ldap command line utilities like ldapsearch?
What does context.list("") return?