--On Saturday, November 17, 2018 9:49 AM +0000 michael@stroeder.com wrote:

Your conclusion is to hard-code the ppolicy schema into the C code. If you think this to the end you have to move *all* standard schema installed to schema_prep.c.

The above statement is simply not true. The difference here is the fact that the ppolicy binary has direct references to the schema in its code, which requires it to have matching schema prior to slapd being able to start. You can still start slapd when any schema (outside of the few items hard coded in schema_prep for the same reason) is different. You have the ability at that point to modify slapd via online operations post-upgrade.

--Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com