Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
SLAPO-REFINT(5) 	       File Formats Manual		 SLAPO-REFINT(5)

NAME
     slapo-refint - Referential Integrity overlay to slapd

SYNOPSIS
     /usr/local/etc/openldap/slapd.conf

DESCRIPTION
     The  Referential Integrity overlay can be used with a backend database such
     as slapd-mdb(5) to maintain the cohesiveness of  a  schema  which	utilizes
     reference attributes.

     Integrity	is  maintained	by  updating  database records which contain the
     named attributes to match the results of a modrdn or delete operation.  For
     example, if the integrity attribute were configured as manager, deletion of
     the  record "uid=robert,ou=people,dc=example,dc=com" would trigger a search
     for all other records which have a manager attribute  containing  that  DN.
     Entries  matching	that  search would have their manager attribute removed.
     Or, renaming the same record into	"uid=george,ou=people,dc=example,dc=com"
     would trigger a search for all other records which have a manager attribute
     containing  that DN.  Entries matching that search would have their manager
     attribute deleted and replaced by the new DN.

     rootdn must be set for the database.  refint runs as the rootdn to gain ac-
     cess to make its updates.	rootpw is not needed.

CONFIGURATION
     These slapd.conf options apply to the Referential Integrity overlay.   They
     should appear after the overlay directive.

     refint_attributes <attribute> [...]
	    Specify  one  or  more  attributes for which integrity will be main-
	    tained as described above.

     refint_nothing <string>
	    Specify an arbitrary value to be used as a placeholder when the last
	    value would otherwise be deleted from an attribute. This can be use-
	    ful in cases where the schema requires the existence of an attribute
	    for which referential integrity is enforced. The attempted	deletion
	    of a required attribute will otherwise result in an Object Class Vi-
	    olation,  causing  the  request to fail.  The string must be a valid
	    DN.

     refint_modifiersname <DN>
	    Specify the DN to be used as the modifiersName of the internal modi-
	    fications performed by the overlay.  It defaults to  "cn=Referential
	    Integrity Overlay".

     Modifications  performed by this overlay are not propagated during replica-
     tion. This overlay must be configured identically on replication  consumers
     in order to maintain full synchronization with the provider.

FILES
     /usr/local/etc/openldap/slapd.conf
	    default slapd configuration file

SEE ALSO
     slapd.conf(5), slapd-config(5).

ACKNOWLEDGEMENTS
     OpenLDAP  Software  is  developed	and  maintained  by The OpenLDAP Project
     <http://www.openldap.org/>.  OpenLDAP Software is derived from the  Univer-
     sity of Michigan LDAP 3.3 Release.

OpenLDAP 2.6.13 		   2026/03/09			 SLAPO-REFINT(5)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=slapo-refint&sektion=5&manpath=FreeBSD+Ports+15.1.quarterly>

home | help