A possible clue from a Sun directory engineer: He thinks that ADS may use schema information to correctly display and format changed entries. The schema for cn=config is private, so ADS may not allow editing.
If this is the case, the question then really becomes is it possible to turn off the schema checking within ADS for specific suffixes?
