RE: schema checking

["Roy Hooper" <rhooper@cyberus.ca>]

> slapd doesn't either... when I ran ldif2ldbm with invalid attributes, I
> was able to search for the attribute using ldapsearch.

slapd does check schema when you have schemacheck turned on in the config
file, but it only does it for modify and add operations (and eventually
modrdn, when modrdn is finished). Data already in the database will be
served up, no matter how broken it is.  This probably happens in all servers
when the schema is changed after a data load, any how.  You wouldn't want
the server to start to send you back BAD data.

ldif2ldbm is only really needed for an initial database load, and even then,
I think you can get away with using ldapadd in an ordered manner (root
object first).