ondra@mistotebe.net wrote:

On Fri, Dec 19, 2014 at 02:41:55AM +0000, michael@stroeder.com wrote:

...

Just because I'm curious:

What's the use-case for setting size and count to zero?

If one wants to forbid an attribute completely one should probably use NOT in a DIT content rule for the STRUCTURAL object class. (This does not mean that this shouldn't be fixed though.)

I personally thought that OpenLDAP did not implement DIT content rules at all.

DIT *content* rules are implemented and I'm using NOT quite often to reject attributes I don't need in a deployment. Kind of a local profile for standard schema.

DIT *structure* rules and name forms are not supported yet.

Ciao, Michael.