To Configure the Referential Integrity Plug-In

All attributes in all databases that are used by the referential integrity plug-in must be indexed. The indexes need to be created in the configuration of all the databases. When the retro change log is enabled, the cn=changelog suffix must be indexed. For information, see Chapter 12, Directory Server Indexing.

Certain limitations are associated with using the referential integrity plug-in in a replicated environment. For a list of these limitations, see Replication and Referential Integrity.

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

1. Make sure that all replicas are configured and that all replication agreements are defined.

2. Determine the set of attributes for which you will maintain referential integrity and the update interval that you want to use on your master servers.

3. Enable the referential integrity plug-in on all master servers using the same set of attributes and the same update interval.

   • To define the attributes for referential integrity, use this command:

     $ dsconf set-server-prop -h host -p port ref-integrity-attr:attribute-name

   • To define the referential integrity update interval, use this command:

     $ dsconf set-server-prop -h host -p port ref-integrity-check-delay:duration

   • To enable referential integrity, use this command:

     $ dsconf set-server-prop -h host -p port ref-integrity-enabled:on

4. Ensure that the referential integrity plug-in is disabled on all consumer servers.