On Mon, Dec 22, 2025 at 09:16:12PM +0000, Howard Chu wrote:
Sounds like you're doing this backwards, I would've stored all the elementary attributes and dynamically created the composite attribute from them.
The composite attribute holds the relation between its components. A student could be enrolled in two degrees with differend ending dates. In such a case, it is not possible to construct the two composite attributes from the elementary attributes. You do not know what date is for what degree.
Do entries get created with both the composite and elementary attributes present? Are modifications done to the composite, or to the elementary attributes?
No, all elementay attributes are derivated from composite attributes. Only the composite attribute are edited.
slapo-supann enforces the rule, returning LDAP_UNWILLING_TO_PERFORM on elementary attribute modifications.