Full_Name: Version: OS: URL: Submission from: (NULL) (213.240.180.113)

If your configuration has lots of overlapping constraints affecting the same attributes finding out which constraint was violated can be hard for the user.

Therefore it would be nice if one could add a specific message to a constraint_attribute directive to be returned as LDAP diagnosticMessage if a specific constraint is violated.

Ahem. Personally I'd add there what I have in the comments above the constraint_attribute directive. So this could also be handy for dynamic configuration with cn=config. ;-)