Go to main content

man pages section 5: File Formats

Exit Print View

Updated: Wednesday, July 27, 2022

slapo-refint (5oldap)


slapo-refint - Referential Integrity overlay to slapd




SLAPO-REFINT(5oldap)                                      SLAPO-REFINT(5oldap)

       slapo-refint - Referential Integrity overlay to slapd


       The  Referential  Integrity overlay can be used with a backend database
       such as slapd-bdb(5) to maintain the cohesiveness  of  a  schema  which
       utilizes reference attributes.

       Integrity  is maintained by updating database records which contain the
       named attributes to match the results of a modrdn or delete  operation.
       For  example,  if  the  integrity attribute were configured as manager,
       deletion of the record  "uid=robert,ou=people,dc=example,dc=com"  would
       trigger  a  search for all other records which have a manager attribute
       containing that DN. Entries matching that search would have their  man-
       ager   attribute   removed.    Or,   renaming   the  same  record  into
       "uid=george,ou=people,dc=example,dc=com" would trigger a search for all
       other  records  which  have  a  manager  attribute  containing that DN.
       Entries matching that search would have their manager attribute deleted
       and replaced by the new DN.

       rootdn must be set for the database.  refint runs as the rootdn to gain
       access to make its updates.  rootpw is not needed.

       These slapd.conf options apply to the  Referential  Integrity  overlay.
       They should appear after the overlay directive.

       refint_attributes <attribute> [...]
              Specify one or more attributes for which integrity will be main-
              tained as described above.

       refint_nothing <string>
              Specify an arbitrary value to be used as a placeholder when  the
              last  value  would  otherwise be deleted from an attribute. This
              can be useful in cases where the schema requires  the  existence
              of an attribute for which referential integrity is enforced. The
              attempted deletion of a required attribute will otherwise result
              in  an Object Class Violation, causing the request to fail.  The
              string must be a valid DN.

       refint_modifiersname <DN>
              Specify the DN to be used as the modifiersName of  the  internal
              modifications performed by the overlay.  It defaults to "cn=Ref-
              erential Integrity Overlay".

       Modifications performed by  this  overlay  are  not  propagated  during
       replication. This overlay must be configured identically on replication
       consumers in order to maintain full synchronization with the provider.

              default slapd configuration file

       See attributes(7) for descriptions of the following attributes:

       |ATTRIBUTE TYPE |       ATTRIBUTE VALUE         |
       |Availability   | service/network/ldap/openldap |
       |Stability      | Pass-through uncommitted      |

       slapd.conf(5), slapd-config(5).

       OpenLDAP Software is developed and maintained by The  OpenLDAP  Project
       <http://www.openldap.org/>.  OpenLDAP Software is derived from the Uni-
       versity of Michigan LDAP 3.3 Release.

       Source code for open source software components in Oracle  Solaris  can
       be found at https://www.oracle.com/downloads/opensource/solaris-source-

       This    software    was    built    from    source     available     at
       https://github.com/oracle/solaris-userland.    The  original  community
       source was downloaded from   ftp://ftp.openldap.org/pub/OpenLDAP/openl-

       Further information about this software can be found on the open source
       community website at http://www.openldap.org/.

OpenLDAP 2.4.59                   2021/06/03              SLAPO-REFINT(5oldap)