HI!

I have to admit that when writing a static slapd.conf I do not make any distinction regarding global config section and frontend config section.

So I wonder which criteria are applied to determine whether a parameter is put into cn=config (olcGlobal) or olcDatabase={-1}frontend (olcFrontendConfig) when converting slapd.conf to dynamic config.

Looking at a concrete configuration it does not make sense to me to put attribute olcPasswordHash into olcDatabase={-1}frontend while putting olcPasswordCryptSaltFormat into cn=config. There could even be conflicting values in both entries.

Background: I'd like to determine which password hash scheme and salt format is configured by searching in back-config.

Ciao, Michael.