Bad form replying to myself, I know, but...
http://www.openldap.org/lists/openldap-bugs/200610/msg00090.html.... which claims, in slapd.conf comments, that "Only one proxyattrset definition may appear for any cache set".
Which was completely the wrong quote. It should have read: "A given attribute may only appear in one proxyattrset" Toby
