[Pkg-openldap-devel] Bug#925597: slapd: slapo-constraint manpage pre-dates the advent of olc

[Christoph Biedl]

Package: slapd
Version: 2.4.47+dfsg-3
Severity: normal

Dear Maintainer,

the slapo-constraint(5) manpage still refers to /etc/ldap/slapd.conf for
configuration, a configuration method that has been abandoned ... many
years ago. It took hours of searching and eventually using strace to
confirm it's completely ignored.

So *please* update the documentation and the examples of usage. The
Administrator's Guide has something about this (12.4.2), and I had to
read the openldap sources to learn the appropriate keywords like
olcConstraintAttribute to find that one.

And while you're on it, it really shouldn't hurt to mention the
constraint module needs to be loaded before it's possible to use it.
This is mentioned in slapd.overlay(5), but that's another piece of
information you'd only find when you already know what you are looking
for.

Constraints still don't work for me, that's something for another day.

    Christoph, who had hoped to pass the "setting up constraints" level in ten minutes
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20190327/a71350fb/attachment.sig>