MAN page from StartCom 5 openldap-servers-overlays-2.3.43-12.SEL5_5.i386.rpm
Section: File Formats (5)
slapo-translucent - Translucent Proxy overlay
The Translucent Proxy overlay can be used with a backend database such asslapd-bdb
(5)to create a "translucent proxy". Entries retrieved from a remote LDAPserver may have some or all attributes overridden, or new attributesadded, by entries in the local database before being presented to theclient.
Asearchoperation is first populated with entries from the remote LDAP server, theattributes of which are then overridden with any attributes defined in thelocal database. Local overrides may be populated with theadd,modify ,andmodrdnoperations, the use of which is restricted to the root user.
Acompareoperation will perform a comparison with attributes defined in the localdatabase record (if any) before any comparison is made with data in theremote database.
The Translucent Proxy overlay uses a remote LDAP server which is configuredwith the options shown inslapd-ldap
options are specific to the Translucent Proxy overlay; they may appear anywhereafter theoverlay
directive and before any subsequentdatabase
- By default, attempts to delete attributes in either the local or remotedatabases will be silently ignored. Thetranslucent_strictdirective causes these modifications to fail with a Constraint Violation.
- This configuration option disables the automatic creation of "glue" recordsfor anaddormodrdnoperation, such that all parents of an entry added to the local databasemust be created by hand. Glue records are always created for amodifyoperation.
The Translucent Proxy overlay will disable schema checking in the local database,so that an entry consisting of overlay attributes need not adhere to thecomplete schema.
Because the translucent overlay does not perform any DN rewrites, the localand remote database instances must have the same suffix. Other configurationswill probably fail with No Such Object and other errors.
- default slapd configuration file
- SEE ALSO
This document was created byman2html,using the manual pages.