Hello,

I want to call an extended operation of the LDAP Server, the modify
password operation (RFC 3062).

This extended operation expects an (optional) sequence of three strings.
Unfortunately, it seems that the interface of ExtendedRequest is
expected to always return just the byte array of one string. The
LdapClient seems to take it as guaranteed that the byte array is the
representation of a string and marks it as an octet string.

This would mean that ExtendedRequest cannot be used to make calls of
extended operations that have non-string values.

Is this right, or am I getting something wrong here. I certainly hope
that I am wrong, because this would render LdapClient practically
useless for me.

Thanks for any hints.

Some more details: I am testing this on Java 5 on FreeBSD (diablo jdk).
One way I tried to create the byte array is as follows:

ASN1EncodableVector vector = new ASN1EncodableVector();
vector.add(new BERConstructedOctetString(userIdentity.getBytes("utf-8")));
vector.add(new BERConstructedOctetString(oldPassword.getBytes("utf-8")));
vector.add(new BERConstructedOctetString(newPassword.getBytes("utf-8")));
BERSequence sequence = new BERSequence(vector);
encodedValue = sequence.getEncoded(ASN1Encodable.BER);

This at least did not lead to a CommunicationException, but the
LDAP-Server (OpenLDAP 2.3.39) answered, that the old password was not
supplied.

Regards,
Christian