Hi Steven and others, You are right. If no objection from others, I will see if I can make the change. In 5th edition the constraint was (SIZE (0..ub-user-password)). As we moved the size restrictions, the upper bound was replaced with MAX without too much thinking. Erik Andersen Andersen's L-Service Elsevej 48, DK-3500 Vaerloese Denmark Mobile: +45 2097 1490 email: era@xxxxxxx www.x500.eu www.x500standard.com -----Original Message----- From: x500standard-bounce@xxxxxxxxxxxxx [mailto:x500standard-bounce@xxxxxxxxxxxxx] On Behalf Of Steven Legg Sent: 7. maj 2009 08:04 To: x500standard@xxxxxxxxxxxxx Subject: [x500standard] Size constraint on userPassword attribute The text for the sixth edition of X.509 defines the syntax of the userPassword attribute to be "OCTET STRING (SIZE (0..MAX))". The constraint "(SIZE (0..MAX))" is redundant (it allows all possible sizes) and can be removed. Regards, Steven ----- www.x500standard.com: The central source for information on the X.500 Directory Standard. ----- www.x500standard.com: The central source for information on the X.500 Directory Standard.