1 .TH SLAPD-LDAP 5 "RELEASEDATE" "OpenLDAP LDVERSION"
2 .\" Copyright 1998-2003 The OpenLDAP Foundation All Rights Reserved.
3 .\" Copying restrictions apply. See COPYRIGHT/LICENSE.
6 slapd-ldap \- LDAP backend to slapd
12 is not an actual database; instead it acts as a proxy to forward incoming
13 requests to another LDAP server. While processing requests it will also
14 chase referrals, so that referrals are fully processed instead of being
15 returned to the slapd client.
19 options apply to the LDAP backend database.
20 That is, they must follow a "database ldap" line and come before any
21 subsequent "backend" or "database" lines.
22 Other database options are described in the
26 Note: It is strongly recommended to set
35 This is because operational attributes related to entry creation and
36 modification should not be used, as they could be passed to the target
37 servers, generating an error.
43 Obsolete option; same as `uri ldap://<hostport>/'.
45 .B binddn "<administrative DN for access control purposes>"
46 DN which is used to query the target server for acl checking; it
47 should have read access on the target server to attributes used on the
48 proxy for acl checking.
49 There is no risk of giving away such values; they are only used to
53 Password used with the bind DN above.
56 If this option is given, the client's bind credentials are remembered
57 for rebinds when chasing referrals.
59 .B suffixmassage <suffix> <massaged (remote) suffix>
60 DNs ending with <suffix> in a request are changed to end with <remote
61 suffix> before sending the request to the remote server, and <remote
62 suffix> in the results are changed back to <suffix> before returning
64 The <suffix> field must be defined as a valid suffix (or suffixAlias?)
65 for the current database.
67 .B map "{attribute | objectclass} [<local name> | *] {<foreign name> | *}"
68 Map attribute names and object classes from the foreign server to
69 different values on the local slapd.
70 The reason is that some attributes might not be part of the local
71 slapd's schema, some attribute names might be different but serve the
73 If local or foreign name is `*', the name is preserved.
74 If local name is omitted, the foreign name is removed.
75 Unmapped names are preseved if both local and foreign name are `*',
76 and removed if local name is omitted and foreign name is `*'.
79 The rewrite options are described in the "REWRITING" section of the
83 This maps the OpenLDAP objectclass `groupOfNames' to the Active
84 Directory objectclass `group':
88 map objectclass groupOfNames group
92 This presents a limited attribute set from the foreign
99 map attribute manager *
100 map attribute description *
105 These lines map cn, sn, manager, and description to themselves, and
106 any other attribute gets "removed" from the object before it is sent
107 to the client (or sent up to the LDAP server). This is obviously a
108 simplistic example, but you get the point.
112 default slapd configuration file