Maybe someone should start a "Samba 4 Clean Schemas" set of LDIF Schemas for popular OpenLDAP Applications, such as Samba 3, ISC DHCP, eGroupware, FreeRadius, PostFix, Cyrus IMAP/SASL, Puppet, etc. So that not everyone has to convert them by hand themselves, and they can be tested not to cause Constraint Violations?