On Monday, December 03, 2018 02:11:27 PM Quanah Gibson-Mount wrote:

--On Monday, December 03, 2018 1:57 PM -0800 Daniel Howard dannyman@toldme.com wrote:

...

A potentially minor improvement along these lines could be a very nice feature enhancement for OpenLDAP. Thank you for your consideration.

You're talking about two things: a) slapmodify, which is slated for release with OpenLDAP 2.5, which allows offline modifications of cn=config, and b) delete support in cn=config, also slated for release with OpenLDAP 2.5.

slapmodify is nice, however modifying schema is still hard. The old schema file format is still much better than the ldif format for viewing and editing. It would be a nice to have a tool that can parse and diff schemas in the old format and generate ldif modifications for slapmodify or ldapmodify to handle.