SLAPD.OVERLAYS(5)	      File Formats Manual	     SLAPD.OVERLAYS(5)



NAME
       slapd.overlays - overlays for slapd, the stand-alone LDAP daemon

DESCRIPTION
       The slapd(8) daemon can use a variety of different overlays to alter or
       extend the normal behavior of a database backend.  Overlays may be com-
       piled  statically  into	slapd, or when module support is enabled, they
       may be dynamically loaded. Most of the overlays are only allowed to  be
       configured  on  individual  databases,  but some may also be configured
       globally.

       Configuration options for each overlay are documented separately in the
       corresponding slapo-<overlay>(5) manual pages.

       accesslog
	      Access  Logging.	 This  overlay	can record accesses to a given
	      backend database on another database.

       auditlog
	      Audit Logging.  This overlay records changes on a given  backend
	      database to an LDIF log file.  By default it is not built.

       chain  Chaining.	 This overlay allows automatic referral chasing when a
	      referral would have been returned, either when configured by the
	      server or when requested by the client.

       collect
	      Collective Attributes.  This overlay implements RFC 3671 collec-
	      tive attributes; these attributes share common values  over  all
	      the  members  of	the  collection	 as inherited from an ancestor
	      entry.

       constraint
	      Constraint.  This overlay enforces  a  regular  expression  con-
	      straint  on  all	values	of specified attributes. It is used to
	      enforce a more rigorous syntax  when  the	 underlying  attribute
	      syntax is too general.

       dds    Dynamic  Directory  Services.   This  overlay  supports  dynamic
	      objects, which have a limited life after which they  expire  and
	      are automatically deleted.

       dyngroup
	      Dynamic Group.  This is a demo overlay which extends the Compare
	      operation to detect members of  a	 dynamic  group.   It  has  no
	      effect on any other operations.

       dynlist
	      Dynamic  List.   This overlay allows expansion of dynamic groups
	      and more.

       memberof
	      MemberOf.	 This overlay maintains automatic reverse  group  mem-
	      bership  values,	typically  stored  in an attribute called mem-
	      berOf.

       pbind  Proxybind.  This overlay forwards	 simple	 bind  requests	 on  a
	      local database to a remote LDAP server.

       pcache Proxycache.  This overlay allows caching of LDAP search requests
	      in  a  local  database.	It  is	most  often  used   with   the
	      slapd-ldap(5) or slapd-meta(5) backends.

       ppolicy
	      Password	Policy.	  This	overlay provides a variety of password
	      control mechanisms, e.g.	password  aging,  password  reuse  and
	      duplication control, mandatory password resets, etc.

       refint Referential  Integrity.  This overlay can be used with a backend
	      database such as slapd-bdb(5) to maintain the cohesiveness of  a
	      schema which utilizes reference attributes.

       retcode
	      Return  Code.   This  overlay  is useful to test the behavior of
	      clients when server-generated erroneous and/or unusual responses
	      occur.

       rwm    Rewrite/remap.  This overlay is experimental.  It performs basic
	      DN/data rewrite and objectClass/attributeType mapping.

       sssvlv Server Side Sorting and Virtual List Views.  This overlay imple-
	      ments  the  RFC2891 server-side sorting control and virtual list
	      view controls, and replaces the RFC2696 paged-results  implemen-
	      tation to ensure it works with the sorting technique.

       syncprov
	      Syncrepl	Provider.   This  overlay implements the provider-side
	      support for syncrepl replication,	 including  persistent	search
	      functionality.

       translucent
	      Translucent  Proxy.   This  overlay  can	be used with a backend
	      database such as slapd-bdb(5) to create a	 "translucent  proxy".
	      Content  of  entries  retrieved from a remote LDAP server can be
	      partially overridden by the database.

       unique Attribute Uniqueness.  This overlay can be used with  a  backend
	      database	such as slapd-bdb(5) to enforce the uniqueness of some
	      or all attributes within a subtree.

       valsort
	      Value Sorting.  This overlay can be used to enforce  a  specific
	      order  for  the  values of an attribute when it is returned in a
	      search.

FILES
       /etc/openldap/slapd.conf
	      default slapd configuration file

       /etc/openldap/slapd.d
	      default slapd configuration directory

SEE ALSO
       ldap(3),	  slapo-accesslog(5),	 slapo-auditlog(5),    slapo-chain(5),
       slapo-collect(5), slapo-constraint(5), slapo-dds(5), slapo-dyngroup(5),
       slapo-dynlist(5), slapo-memberof(5),  slapo-pbind(5),  slapo-pcache(5),
       slapo-ppolicy(5),   slapo-refint(5),   slapo-retcode(5),	 slapo-rwm(5),
       slapo-sssvlv(5),	       slapo-syncprov(5),	 slapo-translucent(5),
       slapo-unique(5).	  slapo-valsort(5).   slapd-config(5),	slapd.conf(5),
       slapd.backends(5),   slapd(8).	 "OpenLDAP   Administrator's	Guide"
       (http://www.OpenLDAP.org/doc/admin/)

ACKNOWLEDGEMENTS
       OpenLDAP	 Software  is developed and maintained by The OpenLDAP Project
       <http://www.openldap.org/>.  OpenLDAP Software is derived from  Univer-
       sity of Michigan LDAP 3.3 Release.



OpenLDAP 2.4.40			  2014/09/20		     SLAPD.OVERLAYS(5)