Internationalized email address

This topic has 3 replies, 3 voices, and was last updated 5 years ago by Ludo.

  • Author
  • #18980

    Is it possible to have French characters in email address stored in mail attribute in OpenDJ?

    I am having problems in importing internationalized email address into mail attribute. I get the error below.

    “josé[email protected]” for attribute mail that is invalid according to the associated syntax: The provided value “josé[email protected]” cannot be parsed as a valid IA5 string because it contains an illegal character “-61” that is not allowed in the IA5 (ASCII) character set

    if not possible then what is the advise? How to import it? Should we change syntax of mail to Directory String from IA5String?


    Hi Rajus,

    As per the entry in 00-core.ldif, the mail attribute follows RFC 4524 definition wherein non-utf8 characters are not allowed.

    attributeTypes: ( 0.9.2342.19200300.100.1.3 NAME ( 'mail' 'rfc822Mailbox' )
      EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch
      SYNTAX{256} X-ORIGIN 'RFC 4524' )

    However, OpenDJ does provide the option of relaxing schema-check to import data that does not strictly follow the existing schema definition.
    You may set the property “invalid-attribute-syntax-behavior” to warn level to allow attribute values those do not follow the defined syntax.

    ./dsconfig set-global-configuration-prop --port 4444 --bindDN "cn=Directory Manager" --bindPassword password --set invalid-attribute-syntax-behavior:warn --trustAll --no-prompt

    OR else disable schema check altogether. [Not a recommended option though]

    ./dsconfig set-global-configuration-prop --set check-schema:false --port 4444 --bindDN "cn=Directory Manager" --bindPassword password --no-prompt

    If the above options do not fulfill your requirements then you may try creating your own custom mail attribute.

    Hope this helps !


    Thanks Shivharsh.

    I am bit wary of preventing schema validation.
    Is it advisable to change the mail attribute to the type of Directory String?

    I think that is how it is in ODSEE. I ran into this issue while migrating data from ODSEE to OpenDJ.

    Or is there another attribute out of the box that can be used to store internationalized email addresses?


    As of today, there is no standard LDAP schema for storing internationalized email addresses.
    OpenDJ is trying to be as much compliant with the standard as possible.
    But I’ve seen several customers changing the mail attribute to Directory String. And I’ve noted that it’s also what Microsoft has done for Active Directory. It seems to me that this would be the most practical way to do, at the risk of breaking legacy client applications.
    I would not recommend to fully disable schema checking or syntax validation.

    • This reply was modified 5 years ago by Ludo.
Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.

©2022 ForgeRock - we provide an identity and access platform to secure every online relationship for the enterprise market, educational sector and even entire countries. Click to view our privacy policy and terms of use.

Log in with your credentials

Forgot your details?