Michael Ströder wrote:

Quanah Gibson-Mount wrote:

...

b) Since cn=config is simply a tree, you could have your cn=config in git, commit your changes there, and use a tool like ldapdiff to create changesets to apply programatically.

So instead of writing a single file (in one FS transaction) after letting slaptest check it I have to write several files (multiple FS operations), diff that and then apply multiple LDAP operations.

slapcat -b cn=config -> 1 LDIF file.

P.S.: The day slapd.conf option is dropped from slapd I should start writing my own LDAP server. ;-)

You better get started now, if you want it to be ready to use by then.