NAME

       slapd.overlays - overlays for slapd, the stand-alone LDAP daemon

DESCRIPTION

       The  slapd(8) daemon can use a variety of different overlays to alter or extend the normal
       behavior of a database backend.  Overlays may be compiled statically into slapd,  or  when
       module  support  is enabled, they may be dynamically loaded. Most of the overlays are only
       allowed to be configured  on  individual  databases,  but  some  may  also  be  configured
       globally.

       Configuration  options  for  each  overlay  are documented separately in the corresponding
       slapo-<overlay>(5) manual pages.

       accesslog
              Access Logging.  This overlay can record accesses to a given  backend  database  on
              another database.

       auditlog
              Audit Logging.  This overlay records changes on a given backend database to an LDIF
              log file.  By default it is not built.

       autoca Automatic  Certificate  Authority  overlay.   This  overlay  can   generate   X.509
              certificate/key  pairs  for entries in the directory if slapd is linked to OpenSSL.
              By default it is not built.

       chain  Chaining.  This overlay allows automatic referral chasing  when  a  referral  would
              have  been  returned, either when configured by the server or when requested by the
              client.

       collect
              Collective Attributes.  This overlay implements  RFC  3671  collective  attributes;
              these  attributes  share  common  values  over all the members of the collection as
              inherited from an ancestor entry.

       constraint
              Constraint.  This overlay enforces a regular expression constraint on all values of
              specified  attributes.  It  is  used  to  enforce  a  more rigorous syntax when the
              underlying attribute syntax is too general.

       dds    Dynamic Directory Services.  This overlay supports dynamic objects,  which  have  a
              limited life after which they expire and are automatically deleted.

       deref  Dereference  Control.   This  overlay implements the draft Dereference control. The
              overlay can be used with any backend or globally for all backends.

       dyngroup
              Dynamic Group.  This is a demo overlay  which  extends  the  Compare  operation  to
              detect members of a dynamic group.  It has no effect on any other operations.

       dynlist
              Dynamic List.  This overlay allows expansion of dynamic groups and more.

       homedir
              Home  Directory  Provisioning.   This  overlay  manages  creation/deletion  of home
              directories for LDAP-based Unix accounts.

       memberof
              MemberOf.  This  overlay  maintains  automatic  reverse  group  membership  values,
              typically  stored  in  an attribute called memberOf. This overlay is deprecated and
              should be replaced with dynlist.

       otp    OATH One-Time Password module.  This module allows  time-based  one-time  password,
              AKA  "authenticator-style",  and  HMAC-based one-time password authentication to be
              used in conjunction with a standard LDAP password for two factor authentication.

       pbind  Proxybind.  This overlay forwards simple bind requests on a  local  database  to  a
              remote LDAP server.

       pcache Proxycache.   This  overlay  allows  caching  of  LDAP  search  requests in a local
              database.  It is most often used with the slapd-ldap(5) or slapd-meta(5) backends.

       ppolicy
              Password Policy.  This overlay provides a variety of password  control  mechanisms,
              e.g.  password  aging,  password  reuse and duplication control, mandatory password
              resets, etc.

       refint Referential Integrity.  This overlay can be used with a backend  database  such  as
              slapd-mdb(5)  to  maintain  the  cohesiveness  of a schema which utilizes reference
              attributes.

       remoteauth
              Remote Authentication.  This overlay delegates authentication  requests  to  remote
              directories.

       retcode
              Return  Code.   This overlay is useful to test the behavior of clients when server-
              generated erroneous and/or unusual responses occur.

       rwm    Rewrite/remap.  This overlay is experimental.  It performs  basic  DN/data  rewrite
              and objectClass/attributeType mapping.

       sssvlv Server  Side  Sorting  and Virtual List Views.  This overlay implements the RFC2891
              server-side sorting control and  virtual  list  view  controls,  and  replaces  the
              RFC2696 paged-results implementation to ensure it works with the sorting technique.

       syncprov
              Syncrepl  Provider.  This overlay implements the provider-side support for syncrepl
              replication, including persistent search functionality.

       translucent
              Translucent Proxy.  This overlay can be  used  with  a  backend  database  such  as
              slapd-mdb(5)  to create a "translucent proxy".  Content of entries retrieved from a
              remote LDAP server can be partially overridden by the database.

       unique Attribute Uniqueness.  This overlay can be used with a  backend  database  such  as
              slapd-mdb(5) to enforce the uniqueness of some or all attributes within a subtree.

       valsort
              Value Sorting.  This overlay can be used to enforce a specific order for the values
              of an attribute when it is returned in a search.

FILES

       /etc/ldap/slapd.conf
              default slapd configuration file

       /etc/ldap/slapd.d
              default slapd configuration directory

SEE ALSO

       ldap(3),   slapo-accesslog(5),   slapo-auditlog(5),    slapo-autoca(5),    slapo-chain(5),
       slapo-collect(5),  slapo-constraint(5),  slapo-dds(5),  slapo-deref(5), slapo-dyngroup(5),
       slapo-dynlist(5), slapo-memberof(5),  slapo-pbind(5),  slapo-pcache(5),  slapo-ppolicy(5),
       slapo-refint(5),  slapo-remoteauth(5),  slapo-retcode(5),  slapo-rwm(5),  slapo-sssvlv(5),
       slapo-syncprov(5),     slapo-translucent(5),      slapo-unique(5).       slapo-valsort(5).
       slapd-config(5),  slapd.conf(5),  slapd.backends(5),  slapd(8).  "OpenLDAP Administrator's
       Guide" (http://www.OpenLDAP.org/doc/admin/)

ACKNOWLEDGEMENTS

       OpenLDAP   Software   is   developed   and   maintained   by    The    OpenLDAP    Project
       <http://www.openldap.org/>.   OpenLDAP Software is derived from the University of Michigan
       LDAP 3.3 Release.