1SLAPD.OVERLAYS(5) File Formats Manual SLAPD.OVERLAYS(5)
2
6 slapd.overlays - overlays for slapd, the stand-alone LDAP daemon
7
9 The slapd(8) daemon can use a variety of different overlays to alter or
10 extend the normal behavior of a database backend. Overlays may be com‐
11 piled statically into slapd, or when module support is enabled, they
12 may be dynamically loaded. Most of the overlays are only allowed to be
13 configured on individual databases, but some may also be configured
14 globally.
15 Configuration options for each overlay are documented separately in the
17 corresponding slapo-<overlay>[22m(5) manual pages.
18 accesslog
20 Access Logging. This overlay can record accesses to a given
21 backend database on another database.
22 auditlog
24 Audit Logging. This overlay records changes on a given backend
25 database to an LDIF log file. By default it is not built.
26 chain Chaining. This overlay allows automatic referral chasing when a
28 referral would have been returned, either when configured by the
29 server or when requested by the client.
30 collect
32 Collective Attributes. This overlay implements RFC 3671 collec‐
33 tive attributes; these attributes share common values over all
34 the members of the collection as inherited from an ancestor en‐
35 try.
36 constraint
38 Constraint. This overlay enforces a regular expression con‐
39 straint on all values of specified attributes. It is used to en‐
40 force a more rigorous syntax when the underlying attribute syn‐
41 tax is too general.
42 dds Dynamic Directory Services. This overlay supports dynamic ob‐
44 jects, which have a limited life after which they expire and are
45 automatically deleted.
46 dyngroup
48 Dynamic Group. This is a demo overlay which extends the Compare
49 operation to detect members of a dynamic group. It has no ef‐
50 fect on any other operations.
51 dynlist
53 Dynamic List. This overlay allows expansion of dynamic groups
54 and more.
55 memberof
57 MemberOf. This overlay maintains automatic reverse group mem‐
58 bership values, typically stored in an attribute called mem‐
59 berOf.
60 pbind Proxybind. This overlay forwards simple bind requests on a lo‐
62 cal database to a remote LDAP server.
63 pcache Proxycache. This overlay allows caching of LDAP search requests
65 in a local database. It is most often used with the
66 slapd-ldap(5) or slapd-meta(5) backends.
67 ppolicy
69 Password Policy. This overlay provides a variety of password
70 control mechanisms, e.g. password aging, password reuse and du‐
71 plication control, mandatory password resets, etc.
72 refint Referential Integrity. This overlay can be used with a backend
74 database such as slapd-bdb(5) to maintain the cohesiveness of a
75 schema which utilizes reference attributes.
76 retcode
78 Return Code. This overlay is useful to test the behavior of
79 clients when server-generated erroneous and/or unusual responses
80 occur.
81 rwm Rewrite/remap. This overlay is experimental. It performs basic
83 DN/data rewrite and objectClass/attributeType mapping.
84 sssvlv Server Side Sorting and Virtual List Views. This overlay imple‐
86 ments the RFC2891 server-side sorting control and virtual list
87 view controls, and replaces the RFC2696 paged-results implemen‐
88 tation to ensure it works with the sorting technique.
89 syncprov
91 Syncrepl Provider. This overlay implements the provider-side
92 support for syncrepl replication, including persistent search
93 functionality.
94 translucent
96 Translucent Proxy. This overlay can be used with a backend
97 database such as slapd-bdb(5) to create a "translucent proxy".
98 Content of entries retrieved from a remote LDAP server can be
99 partially overridden by the database.
100 unique Attribute Uniqueness. This overlay can be used with a backend
102 database such as slapd-bdb(5) to enforce the uniqueness of some
103 or all attributes within a subtree.
104 valsort
106 Value Sorting. This overlay can be used to enforce a specific
107 order for the values of an attribute when it is returned in a
108 search.
109
111 /etc/openldap/slapd.conf
112 default slapd configuration file
113 /etc/openldap/slapd.d
115 default slapd configuration directory
116
118 ldap(3), slapo-accesslog(5), slapo-auditlog(5), slapo-chain(5),
119 slapo-collect(5), slapo-constraint(5), slapo-dds(5), slapo-dyngroup(5),
120 slapo-dynlist(5), slapo-memberof(5), slapo-pbind(5), slapo-pcache(5),
121 slapo-ppolicy(5), slapo-refint(5), slapo-retcode(5), slapo-rwm(5),
122 slapo-sssvlv(5), slapo-syncprov(5), slapo-translucent(5),
123 slapo-unique(5). slapo-valsort(5). slapd-config(5), slapd.conf(5),
124 slapd.backends(5), slapd(8). "OpenLDAP Administrator's Guide"
125 (http://www.OpenLDAP.org/doc/admin/)
126
128 OpenLDAP Software is developed and maintained by The OpenLDAP Project
129 <http://www.openldap.org/>. OpenLDAP Software is derived from the Uni‐
130 versity of Michigan LDAP 3.3 Release.
131OpenLDAP 2021/06/03 SLAPD.OVERLAYS(5)