NAME

       slapo-refint - Referential Integrity overlay to slapd

SYNOPSIS

       /etc/ldap/slapd.conf

DESCRIPTION

       The  Referential  Integrity  overlay can be used with a backend database such as slapd-bdb(5) to maintain
       the cohesiveness of a schema which utilizes reference attributes.

       Integrity is maintained by updating database records which contain the  named  attributes  to  match  the
       results  of  a  modrdn  or  delete  operation. For example, if the integrity attribute were configured as
       manager, deletion of the record "uid=robert,ou=people,dc=example,dc=com" would trigger a search  for  all
       other  records which have a manager attribute containing that DN. Entries matching that search would have
       their     manager     attribute     removed.      Or,     renaming     the     same      record      into
       "uid=george,ou=people,dc=example,dc=com"  would  trigger  a  search  for  all  other records which have a
       manager attribute containing that DN.  Entries matching that search would have  their  manager  attribute
       deleted and replaced by the new DN.

       rootdn  must  be  set  for  the  database.  refint runs as the rootdn to gain access to make its updates.
       rootpw is not needed.

CONFIGURATION

       These slapd.conf options apply to the Referential  Integrity  overlay.   They  should  appear  after  the
       overlay directive.

       refint_attributes <attribute> [...]
              Specify one or more attributes for which integrity will be maintained as described above.

       refint_nothing <string>
              Specify  an  arbitrary  value  to  be used as a placeholder when the last value would otherwise be
              deleted from an attribute. This can be useful in cases where the schema requires the existence  of
              an  attribute  for  which  referential integrity is enforced. The attempted deletion of a required
              attribute will otherwise result in an Object Class Violation, causing the request  to  fail.   The
              string must be a valid DN.

       refint_modifiersname <DN>
              Specify  the  DN  to  be  used as the modifiersName of the internal modifications performed by the
              overlay.  It defaults to "cn=Referential Integrity Overlay".

       Modifications performed by this overlay are not propagated  during  replication.  This  overlay  must  be
       configured  identically  on  replication  consumers  in  order  to maintain full synchronization with the
       provider.

FILES

       /etc/ldap/slapd.conf
              default slapd configuration file

SEE ALSO

       slapd.conf(5), slapd-config(5).

ACKNOWLEDGEMENTS

       OpenLDAP Software is  developed  and  maintained  by  The  OpenLDAP  Project  <http://www.openldap.org/>.
       OpenLDAP Software is derived from the University of Michigan LDAP 3.3 Release.