Dynamically unloading a module

[Jaap Winius <jwinius@umrk.nl>]

Hi folks,

With cn=config (OpenLDAP 2.4.23-6 on Debian squeeze), dynamically  
loading a module is straightforward. E.g., create an LDIF to add the  
the attribute "olcModuleLoad: {1}syncprov" to the cn=module{0} entry,  
apply it and as a result the configuration will be changed and the  
module loaded.

However, when attempting to do the reverse -- applying an LDIF to  
delete that same attribute and unload the module -- this error appears:

   modifying entry "cn=module{0},cn=config"
   ldap_modify: Other (e.g., implementation specific) error (80)
           additional info: cannot delete olcModuleLoad

Of course, it is still possible to stop slapd, remove the unwanted  
attribute directly from /etc/ldap/slapd.d/cn=config/cn=module{0}.ldif  
and start slapd again, but surely that is not the preferred method.

Can anyone explain what the correct method is for dynamically removing  
a module, or does this not work due to a bug in the aforementioned  
version of OpenLDAP?

Thanks,

Jaap