Shutting down some slapd listeners

[Hallvard Breien Furuseth <h.b.furuseth@usit.uio.no>]

Sometimes I want slapd to stop listening for new connections
to ldap:// and ldaps://, but keep listening to ldapi://,
for maintenance before shutdown.

One way would be to extend the 'gentlehup' config option
with a list of which URIs it should affect.  Or we could
add some sort of 'command language' to cn=config/cn=monitor.

Or should I play some temporary tricks with iptables or whatever,
so new connections never reach slapd?  I've never tried that.

--
Hallvard