NAME

       slapd.overlays - overlays for slapd, the stand-alone LDAP daemon

DESCRIPTION

       The  slapd(8)  daemon can use a variety of different overlays to alter or extend the normal behavior of a
       database backend.  Overlays may be compiled statically into slapd, or when  module  support  is  enabled,
       they  may  be  dynamically  loaded.  Most of the overlays are only allowed to be configured on individual
       databases, but some may also be configured globally.

       Configuration options for each overlay are documented separately in the corresponding  slapo-<overlay>(5)
       manual pages.

       accesslog
              Access Logging.  This overlay can record accesses to a given backend database on another database.

       auditlog
              Audit  Logging.  This overlay records changes on a given backend database to an LDIF log file.  By
              default it is not built.

       chain  Chaining.  This overlay allows  automatic  referral  chasing  when  a  referral  would  have  been
              returned, either when configured by the server or when requested by the client.

       collect
              Collective  Attributes.   This overlay implements RFC 3671 collective attributes; these attributes
              share common values over all the members of the collection as inherited from an ancestor entry.

       constraint
              Constraint.  This overlay enforces a regular expression constraint  on  all  values  of  specified
              attributes.  It  is used to enforce a more rigorous syntax when the underlying attribute syntax is
              too general.

       dds    Dynamic Directory Services.  This overlay supports dynamic objects,  which  have  a  limited  life
              after which they expire and are automatically deleted.

       dyngroup
              Dynamic  Group.  This is a demo overlay which extends the Compare operation to detect members of a
              dynamic group.  It has no effect on any other operations.

       dynlist
              Dynamic List.  This overlay allows expansion of dynamic groups and more.

       memberof
              MemberOf.  This overlay maintains automatic reverse group membership values, typically  stored  in
              an attribute called memberOf.

       pbind  Proxybind.   This  overlay  forwards  simple  bind  requests  on a local database to a remote LDAP
              server.

       pcache Proxycache.  This overlay allows caching of LDAP search requests in a local database.  It is  most
              often used with the slapd-ldap(5) or slapd-meta(5) backends.

       ppolicy
              Password  Policy.   This  overlay provides a variety of password control mechanisms, e.g. password
              aging, password reuse and duplication control, mandatory password resets, etc.

       refint Referential Integrity.  This overlay can be used with a backend database such as  slapd-bdb(5)  to
              maintain the cohesiveness of a schema which utilizes reference attributes.

       retcode
              Return  Code.   This  overlay  is  useful  to  test  the behavior of clients when server-generated
              erroneous and/or unusual responses occur.

       rwm    Rewrite/remap.   This  overlay  is  experimental.   It  performs   basic   DN/data   rewrite   and
              objectClass/attributeType mapping.

       sssvlv Server  Side  Sorting  and  Virtual  List  Views.  This overlay implements the RFC2891 server-side
              sorting  control  and  virtual  list  view  controls,  and  replaces  the  RFC2696   paged-results
              implementation to ensure it works with the sorting technique.

       syncprov
              Syncrepl  Provider.   This  overlay implements the provider-side support for syncrepl replication,
              including persistent search functionality.

       translucent
              Translucent Proxy.  This overlay can be used with a  backend  database  such  as  slapd-bdb(5)  to
              create  a  "translucent  proxy".   Content  of  entries retrieved from a remote LDAP server can be
              partially overridden by the database.

       unique Attribute Uniqueness.  This overlay can be used with a backend database such  as  slapd-bdb(5)  to
              enforce the uniqueness of some or all attributes within a subtree.

       valsort
              Value  Sorting.   This  overlay  can  be  used  to  enforce  a specific order for the values of an
              attribute when it is returned in a search.

FILES

       /etc/ldap/slapd.conf
              default slapd configuration file

       /etc/ldap/slapd.d
              default slapd configuration directory

SEE ALSO

       ldap(3), slapo-accesslog(5), slapo-auditlog(5),  slapo-chain(5),  slapo-collect(5),  slapo-constraint(5),
       slapo-dds(5),  slapo-dyngroup(5),  slapo-dynlist(5),  slapo-memberof(5), slapo-pbind(5), slapo-pcache(5),
       slapo-ppolicy(5), slapo-refint(5), slapo-retcode(5),  slapo-rwm(5),  slapo-sssvlv(5),  slapo-syncprov(5),
       slapo-translucent(5),     slapo-unique(5).      slapo-valsort(5).      slapd-config(5),    slapd.conf(5),
       slapd.backends(5), slapd(8).  "OpenLDAP Administrator's Guide" (http://www.OpenLDAP.org/doc/admin/)

ACKNOWLEDGEMENTS

       OpenLDAP Software is  developed  and  maintained  by  The  OpenLDAP  Project  <http://www.openldap.org/>.
       OpenLDAP Software is derived from the University of Michigan LDAP 3.3 Release.

OpenLDAP                                           2017/06/01                                  SLAPD.OVERLAYS(5)