Re: slapo-constraint type uri: Constrained attribute used in LDAP URL

[Howard Chu <hyc@symas.com>]

Michael Ströder wrote:
> Let me restate: If "reside in a separate DIT" means a separate database
> this would be an awkward requirement.
>
> I'd rather like to see another parameter which controls for which
> entries the constraints are enforced applicable within the same
> database. Similar to parameters unique_uri and/or unique_base of
> slapo-unique.

Indeed, that could be useful. It would probably be useful for several of the 
overlays.

It would be even more useful to have a generic config feature for this 
purpose, so that it doesn't need to be explicitly coded for each overlay. The 
most logical approach would be to implement subentry support, and tie their 
subtree search specifications into these functions. You're welcome to submit a 
patch with this implementation.

--
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP     http://www.openldap.org/project/