- Access control for the different PATH_INFO URLs based on regex-matching of arbitrary environment vars.
- Handle LDIF change records for bulk operations
- Make use of HTML 5 features like <datalist> etc.
- <optgroup> markup in all dynamic select lists for grouping options along their superior DNs.
- Reimplement using dumpasn1.cfg for displaying OIDs.
- Reimplement certificate/CRL viewer based on asn1crypto.
- CSS style chooser.
- HTTP-LDAP login bindings:
  Define binding conditions between HTTP connection parameters (REMOTE_ADDR, REMOTE_USER, etc.) and a LDAP authz-DN entry which is result of a LDAP bind.
- Drop-down menu structure with all possible context menu items reachable by one click.
- Time zone chooser.
- More powerful handling of attribute input fields:
  - Multi-select fields for multiple attribute values.
  - Multiple check boxes for setting bits in an Integer.
  - Attribute values composed of multiple accompanying input fields.
  - Multi-line input fields for attributes X-ORDERED set.
- LDAP transaction support (see RFC 5805) for bulk write operations (group administration and bulk modify/renaming)
- Search extensions:
  - Simple Paged Results
  - Virtual List View
  - server-side sorting
- Localization of user interface.
- Support for language tags and ranges when displaying LDAP entries via HTML templates.
- Redesign of plug-in API:
  - Plug-in classes for pre-input, post-input actions at entry level which makes it possible to implement attribute actions which depend on other entry data (e.g. autogeneration/composition of attribute values).
  - Plug-in classes will be limited to a certain scope by configuration (e.g. by matching LDAP URL).
- HTML-based help system.