To Enforce Uniqueness of the uid Attribute

This procedure describes how to enable and configure the UID uniqueness plug-in by using the dsconf command. The DN of the plug-in configuration entry is cn=uid uniqueness,cn=plugins,cn=config.

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

When using DSCC, you must not modify the default UID uniqueness plug-in to enforce uniqueness of another attribute. If you do not want to have a UID uniqueness plug-in, leave the plug-in disabled and create a new plug-in instance for another attribute, as described in To Enforce Uniqueness of Another Attribute.

1. Enable the plug-in.

   $ dsconf enable-plugin -h host -p port "uid uniqueness"

2. Modify the plug-in arguments according to how you want to specify the subtrees where uniqueness is enforced.

   • To specify the base DN of a single subtree, type:

     $ dsconf set-plugin-prop -h host -p port "uid uniqueness" argument:uid\ argument:subtreeBaseDN

     For example:

     $ dsconf set-plugin-prop -h host1 -p 1389 "uid uniqueness" argument:uid \ argument:dc=People,dc=example,dc=com

   • To specify more than one subtree, add more arguments with the full base DN of a subtree as the value of each argument.

     $ dsconf set-plugin-prop -h host -p port "uid uniqueness" argument:uid \ argument:subtreeBaseDN argument:subtreeBaseDN

   • To specify subtrees according to the object class of their base entries, set the arguments to the following values. Uniqueness of the uid attribute is enforced in the subtree below every entry with the baseObjectClass. Optionally, you can specify the entryObjectClass in the third argument so that the plug-in only enforces uniqueness in operations that target entries with this object class.

     $ dsconf set-plugin-prop -h host -p port "uid uniqueness" argument:attribute=uid \ argument:markerObjectClass=baseObjectClass argument:entryObjectClass=baseObjectClass

   • To add an argument to an existing list of arguments, use the following command:

     $ dsconf set-plugin-prop -h host -p port "uid uniqueness" argument+:argument-value

3. Restart the server for your changes to take effect.