I've created a simple Makefile derived from the one for slapo-smbk5pwd for this I'd like to contribute if appropriate. Please review. I grant *all* rights to the OpenLDAP project.
Now for the concrete testing:
In principle it works. That's great!
There's a special corner-case: If the user bound (e.g. anonymous in my test configuration) has no write access to any attribute an empty attribute value list is returned for 'allowedAttributesEffective'.
You mean an instance of the allowedAttributesEffective with the empty value? I'm not seeing anything like that.
Indeed this is helpful since my web2ldap can then distinguish between this attribute being not available at all or no attributes are allowed to be written. But I'm not sure whether that complies to the LDAP data model. What do you think?
In any case, I'd consider it an error, which deserves to be fixed.
p.