I'd be interested to add support for something like this to my LDAP client.

BTW: I'd vote against ";x-allowed" or ";x-required" since a schema-aware client can already determine this in a non-proprietary way from the subschema.

The overlay's source is quite old. Does it still build with recent HEAD?

Ciao, Michael.