I've done a first pass through the source tree adding missing matching rules to the olc* attributes to address ITS#8286 (https://github.com/quanah/openldap-scratch/tree/its8286). However, many of the attributes are string types, and can either be case exact/ignore match. The following is a list of those attributes, and my best guess at which they should be. Once I have a definitive answer on these, I'll commit them:

---------------- servers/slapd/bconfig.c ----------------------- olcInclude -- case ignore match? olcLogFile -- case ignore match? olcModulePath -- case ignore match? olcOverlay -- case ignore match? olcPasswordCryptSaltFormat -- case ignore match? olcPidFile -- case ignore match? olcPluginLogFile -- case ignore match? olcReferral -- case ignore match? olcRootPw -- case exact match? olcSaslAuxprops -- case ignore match? olcSaslHost -- case exact match? olcSaslRealm -- case exact match? olcSaslSecProps -- case exact match? olcSizeLimit -- case ignore match? olcSubordinate -- case ignore match? olcTCPBuffer -- case ignore match? olcTimeLimit -- case ignore match? olcTLSCACertificateFile -- case ignore match? olcTLSCACertificatePath -- case ignore match? olcTLSCertificateFile -- case ignore match? olcTLSCertificatePath -- case ignore match? olcTLSCertificateKey -- ??? (Private OID) olcTLSCertificateKeyFile -- case ignore match? olcTLSCipherSuite -- case ignore match? olcTLSCRLCheck -- case ignore match? olcTLSCRLFile -- case ignore match? olcTLSRandFile -- case ignore match? olcTLSVerifyClient -- case ignore match? olcTLSDHParamFile -- case ignore match? olcTLSSECName -- case ignore match? olcTLSProtocolMin -- case ignore match?

---------------- BACKENDS ----------------------- --- back-asyncmeta olcDbURI -- case ignore match? olcDbStartTLS -- case ignore match? (also, seems to be misnamed and missing the "ldaps" option) olcDbACLPasswd -- case exact match? olcDbIDAssertBind -- case ignore match? olcDbTFSupport -- case ignore match? olcDbTimeout -- case ignore match? olcDbIdleTimeout -- case ignore match? olcDbCancel -- case ignore match? olcDbQuarantine -- case ignore match? olcDbDefaultTarget -- case ignore match? olcDbDnCacheTtl -- case ignore match? olcDbBindTimeout -- case ignore match? olcDbOnErr -- case ignore match? olcDbNretries -- case ignore match? olcDbClientPr -- case ignore match? olcDbKeepalive -- case ignore match?

--- back-bdb/hdb olcDbCheckpoint -- case ignore match? olcDbCryptFile -- case ignore match? olcDbCryptKey -- case ignore match? olcDbConfig -- IA5 case ignore match? olcDbLockDetect -- case ignore match? olcDbMode -- case ignore match?

--- back-ldap olcDbURI -- case ignore match? olcDbStartTLS -- case ignore match? (also, seems to be misnamed? old config parameter was just "tls") olcDbACLPasswd -- case exact match? olcDbACLBind -- case ignore match? olcDbIDAssertPasswd -- case exact match? olcDbIDAssertBind -- case ignore match? olcDbIDAssertMode -- case ignore match? olcDbTFSupport -- case ignore match? olcDbTimeout -- case ignore match? olcDbIdleTimeout -- case ignore match? olcDbConnTtl -- case ignore match? olcDbNetworkTimeout -- case ignore match? olcDbCancel -- case ignore match? olcDbQuarantine -- case ignore match? olcDbOnErr -- case ignore match? olcDbKeepalive -- case ignore match?

--- back-mdb olcDbCheckpoint -- case ignore match? olcDbMode -- case ignore match?

--- back-meta olcDbURI -- case ignore match? olcDbStartTLS -- case ignore match? (also, seems to be misnamed? old config parameter was just "tls") olcDbACLPasswd -- case exact match? olcDbIDAssertBind -- case ignore match? olcDbTFSupport -- case ignore match? olcDbTimeout -- case ignore match? olcDbIdleTimeout -- case ignore match? olcDbConnTtl -- case ignore match? olcDbNetworkTimeout -- case ignore match? olcDbCancel -- case ignore match? olcDbQuarantine -- case ignore match? olcDbDefaultTarget -- case ignore match? olcDbDnCacheTtl -- case ignore match? olcDbBindTimeout -- case ignore match? olcDbOnErr -- case ignore match? olcDbNretries -- case ignore match? olcDbClientPr -- case ignore match? olcDbKeepalive -- case ignore match?

--- back-sql olcDbHost -- case ignore match? olcDbName -- case ignore match? olcDbUser -- case ignore match? olcDbPass -- case exact match? olcSqlConcatPattern -- case ignore match? olcSqlSubtreeCond -- case ignore match? olcSqlChildrenCond -- case ignore match? olcSqlDnMatchCond-- case ignore match? olcSqlOcQuery -- case ignore match? olcSqlAtQuery -- case ignore match? olcSqlInsEntryStmt -- case ignore match? olcSqlUpperFunc -- case ignore match? olcSqlStrcastFunc -- case ignore match? olcSqlDelEntryStmt -- case ignore match? olcSqlRenEntryStmt -- case ignore match? olcSqlDelObjclassesStmt -- case ignore match? olcSqlBaseObject -- case ignore match? olcSqlLayer -- case ignore match? olcSqlFetchAttrs -- case ignore match? olcSqlAliasingKeyword -- case ignore match? olcSqlAliasingQuote -- case ignore match? olcSqlIdQuery -- case ignore match?

---------------- OVERLAYS ----------------------- --- accesslog.c logpurge -- case ignore match? logold -- case ignore match?

--- auditlog.c olcAuditLogFile -- case ignore match?

--- autoca.c olcACAuserClass -- case ignore match? olcACAserverClass -- case ignore match?

--- dds.c olcDDSmaxTtl -- case ignore match? olcDDSminTtl -- case ignore match? olcDDSdefaultTtl -- case ignore match? olcDDSinterval -- case ignore match? olcDDStolerance -- case ignore match?

--- dyngroup.c olcDGAttrPair -- case ignore match?

--- memberof.c olcMemberOfDangling -- case ignore match? olcMemberOfGroupOC -- case ignore match? olcMemberOfMemberAD -- case ignore match? olcMemberOfMemberOfAD -- case ignore match? olcMemberOfDanglingError -- case ignore match?

--- pcache.c olcProxyCache -- case ignore match? olcPcachePosition -- case ignore match? olcPcacheMaxQueries -- case ignore match?

--- rwm.c olcRwmTFSupport -- case ignore match?

--- syncprov.c olcSpCheckpoint -- case ignore match?

--- translucent.c olcTranslucentLocal -- case ignore match? olcTranslucentRemote -- case ignore match?

---------------- CONTRIB ----------------------- --- adremap.c olcADremapDowncase -- case ignore match? olcADremapDNmap -- case ignore match?

--- autogroup.c olcAGmemberOfAd -- case ignore match?

--- smbk5pwd.c olcSmbK5PwdEnable -- case ignore match? olcSmbK5PwdMustChange -- case ignore match?

Thanks, Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com