Re: cn=include

[Howard Chu <hyc@symas.com>]

Eric Irrgang wrote:
> Are olcInclude attributes in cn=config honored as per the Admin Guide 
> section 5.2.2 or is that documentation misleading?

Good question. The short answer is - the use of include files is not 
recommended for cn=config. They really only work correctly when slapd is 
using slapd.conf.

Keep in mind - in slapd.conf, you can insert include statements anywhere at 
all in the config file, you can order them completely arbitrarily, 
interleaving them with any other config statements. Under cn=config, all of 
the cn=Includes are grouped under one place, they can't have anything else 
inserted between them, so if they needed to have other intervening directives 
processed first, they would fail.

Also, the point of using cn=config is to make every part of the configuration 
accessible/modifiable using LDAP. slapd.conf-formatted files (e.g. include 
files) are not accessible or modifiable using LDAP.
--
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc
  OpenLDAP Core Team            http://www.openldap.org/project/