Known bug: cache enabled is known to cause Tcl to abort upon exit.

Add "users" shorthand (dn="^.+$")
Add regex short circuiting for common dn regexs.

no referrals need to be returned.

privs, additive/substractive rules, and rule continuation.  Existing
rules that use 'defaultaccess none' should be 100% compatible.  Rules
that rely other defaultaccess settings will require addition of
explicit clauses granting the access.
Needs additional testing and tuning of logs

Set defaultaccess to 'read' in distribution slapd.conf and add warnings
Set schemacheck to 'on' in distribution slapd.conf and add warnings

(and allowing 'attribute' for backwards compatibility).
manuals and *.schema to be updated as time permits.

Add openldap.schema (currently empty except for a few comments) to
hold OpenLDAP specific schema items (such as for cn=monitor).

from Booker Bense <bbense@networking.stanford.edu>.

avoid clashes with Kth Kerberos.