NAME

       slapd.overlays - overlays for slapd, the stand-alone LDAP daemon

DESCRIPTION

       The  slapd(8) daemon can use a variety of different overlays to alter or extend the normal
       behavior of a database backend.  Overlays may be compiled statically into slapd,  or  when
       module  support  is enabled, they may be dynamically loaded. Most of the overlays are only
       allowed to be configured  on  individual  databases,  but  some  may  also  be  configured
       globally.

       Configuration  options  for  each  overlay  are documented separately in the corresponding
       slapo-<overlay>(5) manual pages.

       accesslog
              Access Logging.  This overlay can record accesses to a given  backend  database  on
              another database.

       auditlog
              Audit Logging.  This overlay records changes on a given backend database to an LDIF
              log file.  By default it is not built.

       chain  Chaining.  This overlay allows automatic referral chasing  when  a  referral  would
              have  been  returned, either when configured by the server or when requested by the
              client.

       collect
              Collective Attributes.  This overlay implements  RFC  3671  collective  attributes;
              these  attributes  share  common  values  over all the members of the collection as
              inherited from an ancestor entry.

       constraint
              Constraint.  This overlay enforces a regular expression constraint on all values of
              specified  attributes.  It  is  used  to  enforce  a  more rigorous syntax when the
              underlying attribute syntax is too general.

       dds    Dynamic Directory Services.  This overlay supports dynamic objects,  which  have  a
              limited life after which they expire and are automatically deleted.

       dyngroup
              Dynamic  Group.   This  is  a  demo  overlay which extends the Compare operation to
              detect members of a dynamic group.  It has no effect on any other operations.

       dynlist
              Dynamic List.  This overlay allows expansion of dynamic groups and more.

       memberof
              MemberOf.  This  overlay  maintains  automatic  reverse  group  membership  values,
              typically stored in an attribute called memberOf.

       pbind  Proxybind.   This  overlay  forwards  simple bind requests on a local database to a
              remote LDAP server.

       pcache Proxycache.  This overlay allows  caching  of  LDAP  search  requests  in  a  local
              database.  It is most often used with the slapd-ldap(5) or slapd-meta(5) backends.

       ppolicy
              Password  Policy.   This overlay provides a variety of password control mechanisms,
              e.g. password aging, password reuse and  duplication  control,  mandatory  password
              resets, etc.

       refint Referential  Integrity.   This  overlay can be used with a backend database such as
              slapd-bdb(5) to maintain the cohesiveness of  a  schema  which  utilizes  reference
              attributes.

       retcode
              Return  Code.   This overlay is useful to test the behavior of clients when server-
              generated erroneous and/or unusual responses occur.

       rwm    Rewrite/remap.  This overlay is experimental.  It performs  basic  DN/data  rewrite
              and objectClass/attributeType mapping.

       sssvlv Server  Side  Sorting  and Virtual List Views.  This overlay implements the RFC2891
              server-side sorting control and  virtual  list  view  controls,  and  replaces  the
              RFC2696 paged-results implementation to ensure it works with the sorting technique.

       syncprov
              Syncrepl  Provider.  This overlay implements the provider-side support for syncrepl
              replication, including persistent search functionality.

       translucent
              Translucent Proxy.  This overlay can be  used  with  a  backend  database  such  as
              slapd-bdb(5)  to create a "translucent proxy".  Content of entries retrieved from a
              remote LDAP server can be partially overridden by the database.

       unique Attribute Uniqueness.  This overlay can be used with a  backend  database  such  as
              slapd-bdb(5) to enforce the uniqueness of some or all attributes within a subtree.

       valsort
              Value Sorting.  This overlay can be used to enforce a specific order for the values
              of an attribute when it is returned in a search.

FILES

       /etc/ldap/slapd.conf
              default slapd configuration file

       /etc/ldap/slapd.d
              default slapd configuration directory

SEE ALSO

       ldap(3),   slapo-accesslog(5),   slapo-auditlog(5),   slapo-chain(5),    slapo-collect(5),
       slapo-constraint(5), slapo-dds(5), slapo-dyngroup(5), slapo-dynlist(5), slapo-memberof(5),
       slapo-pbind(5),  slapo-pcache(5),  slapo-ppolicy(5),  slapo-refint(5),   slapo-retcode(5),
       slapo-rwm(5),  slapo-sssvlv(5),  slapo-syncprov(5), slapo-translucent(5), slapo-unique(5).
       slapo-valsort(5).  slapd-config(5), slapd.conf(5), slapd.backends(5), slapd(8).  "OpenLDAP
       Administrator's Guide" (http://www.OpenLDAP.org/doc/admin/)

ACKNOWLEDGEMENTS

       OpenLDAP    Software    is    developed   and   maintained   by   The   OpenLDAP   Project
       <http://www.openldap.org/>.  OpenLDAP Software is derived from the University of  Michigan
       LDAP 3.3 Release.