--On Saturday, November 17, 2018 9:49 AM +0000 michael(a)stroeder.com wrote:
Your conclusion is to hard-code the ppolicy schema into the C code.
If you think this to the end you have to move *all* standard schema
installed to schema_prep.c.
The above statement is simply not true. The difference here is the fact
that the ppolicy binary has direct references to the schema in its code,
which requires it to have matching schema prior to slapd being able to
start. You can still start slapd when any schema (outside of the few items
hard coded in schema_prep for the same reason) is different. You have the
ability at that point to modify slapd via online operations post-upgrade.
Packaged, certified, and supported LDAP solutions powered by OpenLDAP: