Howard Chu wrote:
cn=config is a slapd database and should be treated as such. The
contents are not vanilla LDIF files, and database internals are always
subject to change. It was designed to be used like other LDAP databases
- using ldap* tools when slapd is running, and using slap* tools when
slapd is offline.
While this is true for normal conditions couldn't there be situations where
cn=config was tweaked in such a way that the server won't come up anymore? In
this case tweaking the LDIF directly is an appropriate solution.