Hi, I just recognized that current slapd advertises the config-context in root-dse, even if back-config is not used (e.g. no config directory exists). To me it seems useful to hide the "configContext" Attribute in such cases and deny searches below cn=config with "no such object".
-- Ralf
