The relax control is exposed and it should not be so.
ekacnet, do you know for which purpose it has been exposed? What was the reason?
I think the reason is the "urgent_replication" test.
ask andrew b. I don't exactly know or make a git blame.
This should have been fixed in "master".
Unfortunately this is much harder to achieve than it seems. I cite abartlet's commit message:
> This must be available to the OpenLDAP backend, to set the GUID values
> in some situations. We need a proper ACL mechanism to control the use
> or abuse of this control.
Well, this is "FIXED" - we need only to move step by step to the PROVISION control.