Description:
A problem has been identified in the Sun One (iPlanet) Directory Servers (4.x and 5.1) when used with PortalBuilder 4.x.  Under certain conditions, the value of the entrydn attribute can become corrupted.  This corruption is caused when the distinguished name (dn) for a group contains more than two commas.

Because of this LDAP corruption, dn entries pertaining to GROUPS cannot be located, and operations such as add, delete, modify, or search do not return accurate results.  Since GROUPS are used to determine role ACLs, the effect is widespread across the entire Portal deployment.

Note: This corruption exists only with the Sun One / iPlanet Directory Server 4.x and 5.x and it has not been detected in any Novell eDirectory Server.

The attached document, SUN_LDAP_EntryDN_Corruption.rtf, contains details on how to detect and correct the corruption.  If the corruption exists, you will also need to request the latest HotFIX for PortalBuilder.

Warning about the possible corruption of data contained in the TIBCO PortalBuilder LDAP.