Full_Name: Michael Ströder Version: HEAD OS: URL: Submission from: (NULL) (84.163.105.68)

HI!

I'd consider this example in the man-page of slapo-constraint to be problematic because the constrained attribute type is the same like the attribute type used for the valid values.

constraint_attribute title uri ldap:///dc=catalog,dc=example,dc=com?title?sub?(objectClass=titleCatalog)

Off course this would work if dc=catalog,dc=example,dc=com would be in a separate database but this is rather unlikely in common setups. So I'd recommend to make this clear.

Ciao, Michael.