3.2.5.1.5 Generating a Member Affiliation Attribute
The management server MUST implement the following process for generating the member affiliation field:
Fetch Unicode strings containing the member's domain name and member name.
For each name string:
The Unicode string is converted into UTF-8 as defined in [RFC2279]
The UTF-8 value is hex-encoded:
Each byte is converted into the hexadecimal representation.
Each of the two resulting hexadecimal digits is then converted into the ASCII character ('0'-'9' and 'a'-'f').
The comma character ',' is added as a separator between each value (two hexadecimal digits representing a byte), but is not added after the last value.
The comma-separated string is then converted into a Unicode string.
The string "{<2.5.4.11=[13]" is pre-pended and the string ">}" is appended to the hex-encoded value.
One Unicode string is generated for each name. To form the result, these Unicode strings are concatenated, using "/" as a separator. The separator MUST not be used if there is only one string. It also MUST not be added after the last string.
When setting the attribute value, replace non-valid XML characters such as '<' and '>' with valid strings such as "<" and ">"
The newly created string is stored in the member's affiliation attribute. Any changes to the member's management domain name or full name MUST result in an updated affiliation attribute.