Brett @Google wrote:
On Sat, Aug 30, 2008 at 7:03 PM, Michael Ströder
> slapo-collect should intercept the write request and forbid the write access
> if the attribute type is declared with COLLECTIVE.
Yep. That sounds reasonable, but i presume it should either return an
unwilling to perform, or silently ignore it.
I'd prefer to not silently ignore it since returning unwillingToPerform
clearly indicates that a client is misbehaving which needs correction.
The latter case would be
better if dumping out a ldap database (as it would be dumped as a
"real" attribute) and then wanting to import that same data back ?
slapadd is a completely different use-case anyway because operational
attributes are also imported.