(ITS#5702) [enhancement] allow cross-attribute constraints in slapo-constraint(5)

Full_Name: Pierangelo Masarati Version: HEAD OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.72.89.40) Submitted by: ando

I've added a "set" type to slapo-constraint(5) that allows to write complex constraints like

constraint_attribute cn,sn,givenName set "(this/givenName + [ ] + this/sn) & this/cn"

forcing a relationship between the values of cn, sn and givenName.

The possibility to enforce the same constraint on multiple attributes separated by commas is given to all constraint types, as a side-effect.

The check is passed the entry during add operations, while it attempts to build the entry resulting from a set of modifications during modify operations.

p.