Set defaultaccess to 'read' in distribution slapd.conf and add warnings
Set schemacheck to 'on' in distribution slapd.conf and add warnings

(and allowing 'attribute' for backwards compatibility).
manuals and *.schema to be updated as time permits.

Add openldap.schema (currently empty except for a few comments) to
hold OpenLDAP specific schema items (such as for cn=monitor).

This is technical incorrect, but we don't have the codes in place
to correctly handle empty values yet.

s/dn_normalize/dn_validate/
s/dn_normalize_case/dn_normalize/

Old code applied sync flags to store(), however supported DBMs
require such flags to be specified during open().  The new
code now applies flags in ldbm_cache_open (which calls ldbm_open).
ldbm_cache_close() now calls ldbm_sync().  This will force
a updating of on-disk contents after each LDAP operation.
The old code either failed to sync the on-disk contents until
close or synced on every store.   Per LDBM operation syncing
*should* be safe enough... real data safety requires transactions.
Removed nosync option from BDB2 as it is not compatible with
txn support.
Also added code to disable DBM level locking as slapd is only
process acessing the databases (dbnolocking).

  and related AC_SUBST() so that when back-tcl is compiled as a dynamic module we link
  -ltcl to the module and not slapd (this is the correct way to do this since the .la file
  handles giving the correct libs when we pass the module to it in the linker line with
  -dlopen). Also modified the perl backend in a similar way except that the PERL_CPPFLAGS
  always go to the module and never to slapd (slapd doesn't need them).
* build/mod.mk: added $(MODLIBS) to the dynamic module link line to accomodate module
  specific libraries. These should be defined in the back-*/Makefile.in file for each
  module (so far only back-tcl and back-perl need it).
* build/top.mk: modified the perl ldflags and cppflags slightly
* servers/slapd/Makefile.in: same here
* servers/slapd/back-perl/Makefile.in: added MODLIBS=$(MOD_PERL_LDFLAGS) for when we are
  using a dynamic module (problem, libtool wont allow linking static libs into a libtool
  lib, so unless perl's libs are compiled dynamic, then back-perl can't be a dynamic
  module. We need a test for this on perl and tcl).
* servers/slapd/back-tcl/Makefile.in: added MODLIBS=$(MOD_TCL_LIB)
* back-perl and back-tcl now compile

* all others: Added DESTDIR support

broken objectclass and attributetype definitions where the OID is
missing.  The implementation of OIDmacros was making this impossible.
This change tries to restore the old behaviour, while preserving the
new feature.  Note that part of the restored behaviour lets OIDs that
are not in the numericoid format get through.  We may lose this, but
then we need to fix some of the sample provided schemas, notably
pilot.schema.

Add JPEG syntax to those known.

  libwrap was a dynamic library). Added -lwrap to new subst var WRAP_LIBS
  so we have more control over where it get's linked (dynamic libwrap
  causes problems when we link to programs that don't define certains
  globals that libwrap expects).
* build/top.mk: Added placeholder for WRAP_LIBS subst
* servers/slapd/Makefile.in: Added $(WRAP_LIBS) to the slapd and sslapd
  link command line specifically so it doesn't get thrown in with the rest
  of the LIBS.
* configure: rebuilt

If not available, LDBM uses big mutex and BDB2 is disabled.
Should add BerkeleyDB version detection...

and back-ldbm are preserved, they only use the up-cased DNs. back-passwd
uses the mixed-case DN. All others are using mixed-case DN, may need more
fixing.

Let oc_check_allowed grok things like userCertificate;binary
oc_check_required should be fixed too.

Let at_find find the AttributeType that matches a given AttributeDescription.
Useful to deal with things like userCertificate;binary.

Add missing paren.

	dn: cn=foo
	changetype: modify
	replace: bar
	-