Raphaël Ouazana-Sustowski wrote:

Wouldn't it be possible to have a more generic solution, eg: while each configuration change, OpenLDAP tests that configuration is still valid.

While checking the configuration data itself seems feasible it does not scale well to check all entries whether they still contain a certain schema element.

Also if you use slapo-accesslog and it contains removed attributes in attributes redMod or reqOld you cannot fully restore the accesslog DB with slapadd.

So using OBSOLETE is best practice. Experimental things you do in your test environment without asking for support is completely up to you.

Ciao, Michael.