diff options
Diffstat (limited to 'doc/man/man5')
49 files changed, 163 insertions, 66 deletions
diff --git a/doc/man/man5/Makefile.in b/doc/man/man5/Makefile.in index edfb106..895fc77 100644 --- a/doc/man/man5/Makefile.in +++ b/doc/man/man5/Makefile.in @@ -2,7 +2,7 @@ # $OpenLDAP$ ## This work is part of OpenLDAP Software <http://www.openldap.org/>. ## -## Copyright 1998-2022 The OpenLDAP Foundation. +## Copyright 1998-2024 The OpenLDAP Foundation. ## All rights reserved. ## ## Redistribution and use in source and binary forms, with or without diff --git a/doc/man/man5/ldap.conf.5 b/doc/man/man5/ldap.conf.5 index aea3577..eb84329 100644 --- a/doc/man/man5/ldap.conf.5 +++ b/doc/man/man5/ldap.conf.5 @@ -1,6 +1,6 @@ .TH LDAP.CONF 5 "RELEASEDATE" "OpenLDAP LDVERSION" .\" $OpenLDAP$ -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .SH NAME ldap.conf, .ldaprc \- LDAP configuration file/environment variables diff --git a/doc/man/man5/ldif.5 b/doc/man/man5/ldif.5 index d3fa232..d5a319f 100644 --- a/doc/man/man5/ldif.5 +++ b/doc/man/man5/ldif.5 @@ -1,6 +1,6 @@ .TH LDIF 5 "RELEASEDATE" "OpenLDAP LDVERSION" .\" $OpenLDAP$ -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .SH NAME ldif \- LDAP Data Interchange Format diff --git a/doc/man/man5/lloadd.conf.5 b/doc/man/man5/lloadd.conf.5 index c2170ed..cfdb0e5 100644 --- a/doc/man/man5/lloadd.conf.5 +++ b/doc/man/man5/lloadd.conf.5 @@ -1,5 +1,5 @@ .TH LLOADD.CONF 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-asyncmeta.5 b/doc/man/man5/slapd-asyncmeta.5 index 84341d3..44fe95a 100644 --- a/doc/man/man5/slapd-asyncmeta.5 +++ b/doc/man/man5/slapd-asyncmeta.5 @@ -1,5 +1,5 @@ .TH SLAPD-ASYNCMETA 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2016-2022 The OpenLDAP Foundation. +.\" Copyright 2016-2024 The OpenLDAP Foundation. .\" Portions Copyright 2016 Symas Corporation. .\" Copying restrictions apply. See the COPYRIGHT file. .\" $OpenLDAP$ @@ -404,15 +404,6 @@ the global value can be overridden by redefinitions inside each target specification. .TP -.B rewrite* ... -The rewrite options are identical to the -.B meta -backend. See the -.B REWRITING -section of -.B slapd\-meta(5). - -.TP .B subtree\-{exclude|include} "<rule>" This directive allows one to indicate what subtrees are actually served by a target. See diff --git a/doc/man/man5/slapd-config.5 b/doc/man/man5/slapd-config.5 index c1fa9c4..9453698 100644 --- a/doc/man/man5/slapd-config.5 +++ b/doc/man/man5/slapd-config.5 @@ -1,5 +1,5 @@ .TH SLAPD-CONFIG 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-dnssrv.5 b/doc/man/man5/slapd-dnssrv.5 index f29c620..2f7f338 100644 --- a/doc/man/man5/slapd-dnssrv.5 +++ b/doc/man/man5/slapd-dnssrv.5 @@ -1,5 +1,5 @@ .TH SLAPD-DNSSRV 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-ldap.5 b/doc/man/man5/slapd-ldap.5 index 4d7251a..bd5c2cc 100644 --- a/doc/man/man5/slapd-ldap.5 +++ b/doc/man/man5/slapd-ldap.5 @@ -1,5 +1,5 @@ .TH SLAPD-LDAP 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-ldif.5 b/doc/man/man5/slapd-ldif.5 index 3209fc4..5074672 100644 --- a/doc/man/man5/slapd-ldif.5 +++ b/doc/man/man5/slapd-ldif.5 @@ -1,5 +1,5 @@ .TH SLAPD-LDIF 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-mdb.5 b/doc/man/man5/slapd-mdb.5 index a6bb77c..c939179 100644 --- a/doc/man/man5/slapd-mdb.5 +++ b/doc/man/man5/slapd-mdb.5 @@ -1,5 +1,5 @@ .TH SLAPD-MDB 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2011-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2011-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-meta.5 b/doc/man/man5/slapd-meta.5 index 2134ff6..6aa0691 100644 --- a/doc/man/man5/slapd-meta.5 +++ b/doc/man/man5/slapd-meta.5 @@ -1,5 +1,5 @@ .TH SLAPD-META 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" Copyright 2001, Pierangelo Masarati, All rights reserved. <ando@sys-net.it> .\" $OpenLDAP$ diff --git a/doc/man/man5/slapd-monitor.5 b/doc/man/man5/slapd-monitor.5 index 84a85ba..4e9e765 100644 --- a/doc/man/man5/slapd-monitor.5 +++ b/doc/man/man5/slapd-monitor.5 @@ -1,5 +1,5 @@ .TH SLAPD-MONITOR 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-null.5 b/doc/man/man5/slapd-null.5 index f091ed6..5f883c8 100644 --- a/doc/man/man5/slapd-null.5 +++ b/doc/man/man5/slapd-null.5 @@ -1,5 +1,5 @@ .TH SLAPD-NULL 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2002-2022 The OpenLDAP Foundation. All Rights Reserved. +.\" Copyright 2002-2024 The OpenLDAP Foundation. All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-passwd.5 b/doc/man/man5/slapd-passwd.5 index 6b51333..2cf6877 100644 --- a/doc/man/man5/slapd-passwd.5 +++ b/doc/man/man5/slapd-passwd.5 @@ -1,5 +1,5 @@ .TH SLAPD-PASSWD 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-relay.5 b/doc/man/man5/slapd-relay.5 index 057d3d4..5240825 100644 --- a/doc/man/man5/slapd-relay.5 +++ b/doc/man/man5/slapd-relay.5 @@ -1,5 +1,5 @@ .TH SLAPD-RELAY 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-sock.5 b/doc/man/man5/slapd-sock.5 index eb7034a..f9ee744 100644 --- a/doc/man/man5/slapd-sock.5 +++ b/doc/man/man5/slapd-sock.5 @@ -1,5 +1,5 @@ .TH SLAPD-SOCK 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2007-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2007-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd-wt.5 b/doc/man/man5/slapd-wt.5 index e83301a..90dde2c 100644 --- a/doc/man/man5/slapd-wt.5 +++ b/doc/man/man5/slapd-wt.5 @@ -1,5 +1,5 @@ .TH SLAPD-WT 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2011-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2011-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd.access.5 b/doc/man/man5/slapd.access.5 index 336353c..0104ad9 100644 --- a/doc/man/man5/slapd.access.5 +++ b/doc/man/man5/slapd.access.5 @@ -1,5 +1,5 @@ .TH SLAPD.ACCESS 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd.backends.5 b/doc/man/man5/slapd.backends.5 index c5640e0..d33491b 100644 --- a/doc/man/man5/slapd.backends.5 +++ b/doc/man/man5/slapd.backends.5 @@ -1,5 +1,5 @@ .TH SLAPD.BACKENDS 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2006-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2006-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5 index 36622d5..e80a6e3 100644 --- a/doc/man/man5/slapd.conf.5 +++ b/doc/man/man5/slapd.conf.5 @@ -1,5 +1,5 @@ .TH SLAPD.CONF 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd.overlays.5 b/doc/man/man5/slapd.overlays.5 index 307a28a..311cf21 100644 --- a/doc/man/man5/slapd.overlays.5 +++ b/doc/man/man5/slapd.overlays.5 @@ -1,5 +1,5 @@ .TH SLAPD.OVERLAYS 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2006-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2006-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapd.plugin.5 b/doc/man/man5/slapd.plugin.5 index 145ff87..5c4f27c 100644 --- a/doc/man/man5/slapd.plugin.5 +++ b/doc/man/man5/slapd.plugin.5 @@ -1,5 +1,5 @@ .TH SLAPD.PLUGIN 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2002-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2002-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .SH NAME slapd.plugin \- plugin configuration for slapd, the stand-alone LDAP daemon diff --git a/doc/man/man5/slapo-accesslog.5 b/doc/man/man5/slapo-accesslog.5 index a21f7d2..075c482 100644 --- a/doc/man/man5/slapo-accesslog.5 +++ b/doc/man/man5/slapo-accesslog.5 @@ -1,5 +1,5 @@ .TH SLAPO-ACCESSLOG 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2005-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2005-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-auditlog.5 b/doc/man/man5/slapo-auditlog.5 index 6aeca87..be15221 100644 --- a/doc/man/man5/slapo-auditlog.5 +++ b/doc/man/man5/slapo-auditlog.5 @@ -1,5 +1,5 @@ .TH SLAPO-AUDITLOG 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2005-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2005-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-autoca.5 b/doc/man/man5/slapo-autoca.5 index 8e77cc8..98a83a1 100644 --- a/doc/man/man5/slapo-autoca.5 +++ b/doc/man/man5/slapo-autoca.5 @@ -1,5 +1,5 @@ .TH SLAPO-AUTOCA 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2009-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2009-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copyright 2009-2018 Howard Chu All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ diff --git a/doc/man/man5/slapo-chain.5 b/doc/man/man5/slapo-chain.5 index eaaa2b2..bc1d29e 100644 --- a/doc/man/man5/slapo-chain.5 +++ b/doc/man/man5/slapo-chain.5 @@ -1,5 +1,5 @@ .TH SLAPO-CHAIN 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-collect.5 b/doc/man/man5/slapo-collect.5 index 443118a..919fe63 100644 --- a/doc/man/man5/slapo-collect.5 +++ b/doc/man/man5/slapo-collect.5 @@ -1,5 +1,5 @@ .TH SLAPO-COLLECT 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2003-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2003-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-constraint.5 b/doc/man/man5/slapo-constraint.5 index 240f713..051cf79 100644 --- a/doc/man/man5/slapo-constraint.5 +++ b/doc/man/man5/slapo-constraint.5 @@ -1,6 +1,6 @@ .TH SLAPO-CONSTRAINT 5 "RELEASEDATE" "OpenLDAP LDVERSION" .\" Copyright 2005-2006 Hewlett-Packard Company -.\" Copyright 2006-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2006-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-dds.5 b/doc/man/man5/slapo-dds.5 index 36218c8..d888c13 100644 --- a/doc/man/man5/slapo-dds.5 +++ b/doc/man/man5/slapo-dds.5 @@ -1,5 +1,5 @@ .TH SLAPO-DDS 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2005-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 2005-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-deref.5 b/doc/man/man5/slapo-deref.5 index abd2dfe..205eca0 100644 --- a/doc/man/man5/slapo-deref.5 +++ b/doc/man/man5/slapo-deref.5 @@ -1,5 +1,5 @@ .TH SLAPO-DEREF 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2008-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2008-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-dyngroup.5 b/doc/man/man5/slapo-dyngroup.5 index bdb4dc5..82a90dc 100644 --- a/doc/man/man5/slapo-dyngroup.5 +++ b/doc/man/man5/slapo-dyngroup.5 @@ -1,5 +1,5 @@ .TH SLAPO-DYNGROUP 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2005-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2005-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-dynlist.5 b/doc/man/man5/slapo-dynlist.5 index 7fe0f70..b2acfd8 100644 --- a/doc/man/man5/slapo-dynlist.5 +++ b/doc/man/man5/slapo-dynlist.5 @@ -1,5 +1,5 @@ .TH SLAPO-DYNLIST 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-homedir.5 b/doc/man/man5/slapo-homedir.5 index cb1ac5b..a983bdf 100644 --- a/doc/man/man5/slapo-homedir.5 +++ b/doc/man/man5/slapo-homedir.5 @@ -1,5 +1,5 @@ .TH SLAPO-HOMEDIR 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-memberof.5 b/doc/man/man5/slapo-memberof.5 index 45bf1b1..e532155 100644 --- a/doc/man/man5/slapo-memberof.5 +++ b/doc/man/man5/slapo-memberof.5 @@ -1,5 +1,5 @@ .TH SLAPO-MEMBEROF 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" $OpenLDAP$ .SH NAME @@ -16,10 +16,8 @@ Any time a group entry is modified, its members are modified as appropriate in order to keep a DN-valued "is member of" attribute updated with the DN of the group. .LP -Note that this overlay is deprecated and support will be dropped in future -OpenLDAP releases. Installations should use the \fBdynlist\fP -overlay instead. Using this overlay in a replicated environment is especially -discouraged. +Note that the \fBdynlist\fP overlay can also provide this functionality +and may be suitable for less demanding environments. .SH CONFIGURATION The config directives that are specific to the @@ -107,6 +105,23 @@ If set to when an entry containing values of the "is member of" attribute is modified, the corresponding groups are modified as well. +.TP +.BI "memberof\-addcheck {" true "|" FALSE "}" +This option determines whether the overlay will check newly added +entries for membership in any existing groups. This check is useful +if populated groups are created in the directory before the entries +they reference. The situation often occurs during replication, which +may replicate entries in random order. +If set to +.IR TRUE , +every Add operation will search for groups referencing the added +entry and populate its memberof attribute with the group DNs. Note +that +.BR memberof\-dangling +must be left on its default setting of +.I ignore +for this option to work. + .LP The memberof overlay may be used with any backend that provides full read-write functionality, but it is mainly intended for use @@ -114,10 +129,9 @@ with local storage backends. The maintenance operations it performs are internal to the server on which the overlay is configured and are never replicated. Consumer servers should be configured with their own instances of the memberOf overlay if it is desired to maintain -these memberOf attributes on the consumers. Note that slapo-memberOf -is not compatible with syncrepl based replication, and should not be -used in a replicated environment. An alternative is to use slapo-dynlist -to emulate slapo-memberOf behavior. +these memberOf attributes on the consumers. Consumers must also be +configured to exclude the \fImemberof\fP attribute from replication. +(See the \fBexattr\fP option in the consumer configuration.) .SH FILES .TP diff --git a/doc/man/man5/slapo-nestgroup.5 b/doc/man/man5/slapo-nestgroup.5 new file mode 100644 index 0000000..9f0ddbb --- /dev/null +++ b/doc/man/man5/slapo-nestgroup.5 @@ -0,0 +1,92 @@ +.TH SLAPO-NESTGROUP 5 "RELEASEDATE" "OpenLDAP LDVERSION" +.\" Copyright 2024 The OpenLDAP Foundation, All Rights Reserved. +.\" Copying restrictions apply. See the COPYRIGHT file. +.\" $OpenLDAP$ +.SH NAME +slapo\-nestgroup \- Nested Group overlay to slapd +.SH SYNOPSIS +ETCDIR/slapd.conf +.SH DESCRIPTION +The +.B nestgroup +overlay to +.BR slapd (8) +supports evaluation of nested groups in Search operations. Support consists +of four possible features: inclusion of parent groups when searching with +(member=) filters, inclusion of child groups when searching with (memberOf=) +filters, expansion of child groups when returning member attributes, and +expansion of parent groups when returning memberOf attributes. Each of +these features may be enabled independently. By default, no features are +enabled, so this overlay does nothing unless explicitly enabled. + +.SH CONFIGURATION +The config directives that are specific to the +.B nestgroup +overlay must be prefixed by +.BR nestgroup\- , +to avoid potential conflicts with directives specific to the underlying +database or to other stacked overlays. + +.TP +.B overlay nestgroup +This directive adds the nestgroup overlay to the current database; see +.BR slapd.conf (5) +for details. + +.LP +The following +.B slapd.conf +configuration options are defined for the nestgroup overlay. + +.TP +.BI nestgroup\-member \ <member-ad> +The value +.I <member-ad> +is the name of the attribute that contains the names of the members +in the group objects; it must be DN-valued. +It defaults to \fImember\fP. + +.TP +.BI nestgroup\-memberof \ <memberof-ad> +The value +.I <memberof-ad> +is the name of the attribute that contains the names of the groups +an entry is member of; it must be DN-valued. +It defaults to \fImemberOf\fP. + +.TP +.BI nestgroup\-base \ <dn> +The value +.I <dn> +specifies a subtree that contains group entries in the DIT. This +may be specified multiple times for multiple distinct subtrees. +It has no default and the overlay does no processing unless it is +explicitly configured. + +.TP +.BI "nestgroup\-flags {" member-filter ", " memberof-filter ", " member-values ", " memberof-values "}" +This option specifies which features to enable in the overlay. +By default, nothing is enabled and the overlay is a no-op. + +.LP +The nestgroup overlay may be used with any backend that provides standard +search functionality. + +.SH FILES +.TP +ETCDIR/slapd.conf +default slapd configuration file +.SH SEE ALSO +.BR slapo\-dynlist (5), +.BR slapo\-memberof (5), +.BR slapd.conf (5), +.BR slapd\-config (5), +.BR slapd (8). +The +.BR slapo\-nestgroup (5) +overlay supports dynamic configuration via +.BR back-config . +.SH ACKNOWLEDGEMENTS +.P +This module was written in 2024 by Howard Chu of Symas Corporation. + diff --git a/doc/man/man5/slapo-otp.5 b/doc/man/man5/slapo-otp.5 index 7ff89c3..90a8cc1 100644 --- a/doc/man/man5/slapo-otp.5 +++ b/doc/man/man5/slapo-otp.5 @@ -1,5 +1,5 @@ .TH SLAPO_OTP 5 "2018/6/29" "SLAPO-OTP" -.\" Copyright 2015-2022 The OpenLDAP Foundation. +.\" Copyright 2015-2024 The OpenLDAP Foundation. .\" Portions Copyright 2015 by Howard Chu, Symas Corp. All rights reserved. .\" Portions Copyright 2018 by Ondřej Kuzník, Symas Corp. All rights reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. diff --git a/doc/man/man5/slapo-pbind.5 b/doc/man/man5/slapo-pbind.5 index 4a3c58f..5ce6491 100644 --- a/doc/man/man5/slapo-pbind.5 +++ b/doc/man/man5/slapo-pbind.5 @@ -1,5 +1,5 @@ .TH SLAPO-PBIND 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2010-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 2010-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-pcache.5 b/doc/man/man5/slapo-pcache.5 index 3dd0141..0b8fcad 100644 --- a/doc/man/man5/slapo-pcache.5 +++ b/doc/man/man5/slapo-pcache.5 @@ -1,5 +1,5 @@ .TH SLAPO-PCACHE 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" Copyright 2001, Pierangelo Masarati, All rights reserved. <ando@sys-net.it> .\" $OpenLDAP$ diff --git a/doc/man/man5/slapo-ppolicy.5 b/doc/man/man5/slapo-ppolicy.5 index 7a639f0..47f1138 100644 --- a/doc/man/man5/slapo-ppolicy.5 +++ b/doc/man/man5/slapo-ppolicy.5 @@ -1,5 +1,5 @@ .TH SLAPO_PPOLICY 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2004-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2004-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-refint.5 b/doc/man/man5/slapo-refint.5 index 98c24e7..2076c3f 100644 --- a/doc/man/man5/slapo-refint.5 +++ b/doc/man/man5/slapo-refint.5 @@ -1,5 +1,5 @@ .TH SLAPO-REFINT 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2004-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2004-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-remoteauth.5 b/doc/man/man5/slapo-remoteauth.5 index 4d12587..11e3e02 100644 --- a/doc/man/man5/slapo-remoteauth.5 +++ b/doc/man/man5/slapo-remoteauth.5 @@ -1,5 +1,5 @@ .TH SLAPO-REMOTEAUTH 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" $OpenLDAP$ .SH NAME @@ -154,7 +154,7 @@ anything following, including ":", is ignored. .BR slapd (8). .SH Copyrights -Copyright 2004-2022 The OpenLDAP Foundation. +Copyright 2004-2024 The OpenLDAP Foundation. Portions Copyright 2004-2017 Howard Chu, Symas Corporation. Portions Copyright 2017-2021 Ondřej Kuzník, Symas Corporation. Portions Copyright 2004 Hewlett-Packard Company diff --git a/doc/man/man5/slapo-retcode.5 b/doc/man/man5/slapo-retcode.5 index ab63801..284a908 100644 --- a/doc/man/man5/slapo-retcode.5 +++ b/doc/man/man5/slapo-retcode.5 @@ -1,5 +1,5 @@ .TH SLAPO-RETCODE 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" Copyright 2001, Pierangelo Masarati, All rights reserved. <ando@sys-net.it> .\" $OpenLDAP$ diff --git a/doc/man/man5/slapo-rwm.5 b/doc/man/man5/slapo-rwm.5 index 39d2471..2f433b1 100644 --- a/doc/man/man5/slapo-rwm.5 +++ b/doc/man/man5/slapo-rwm.5 @@ -1,5 +1,5 @@ .TH SLAPO-RWM 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 1998-2022 The OpenLDAP Foundation, All Rights Reserved. +.\" Copyright 1998-2024 The OpenLDAP Foundation, All Rights Reserved. .\" Copying restrictions apply. See the COPYRIGHT file. .\" Copyright 2004, Pierangelo Masarati, All rights reserved. <ando@sys-net.it> .\" $OpenLDAP$ diff --git a/doc/man/man5/slapo-sssvlv.5 b/doc/man/man5/slapo-sssvlv.5 index 42a39a7..81396cb 100644 --- a/doc/man/man5/slapo-sssvlv.5 +++ b/doc/man/man5/slapo-sssvlv.5 @@ -1,5 +1,5 @@ .TH SLAPO-SSSVLV 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2009-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2009-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copyright 2009 Symas Corporation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ diff --git a/doc/man/man5/slapo-syncprov.5 b/doc/man/man5/slapo-syncprov.5 index 3c6e6b8..5c7d590 100644 --- a/doc/man/man5/slapo-syncprov.5 +++ b/doc/man/man5/slapo-syncprov.5 @@ -1,5 +1,5 @@ .TH SLAPO-SYNCPROV 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2004-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2004-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-translucent.5 b/doc/man/man5/slapo-translucent.5 index f7dadf2..087becc 100644 --- a/doc/man/man5/slapo-translucent.5 +++ b/doc/man/man5/slapo-translucent.5 @@ -1,5 +1,5 @@ .TH SLAPO-TRANSLUCENT 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2004-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2004-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-unique.5 b/doc/man/man5/slapo-unique.5 index 3ceef5e..42f6a97 100644 --- a/doc/man/man5/slapo-unique.5 +++ b/doc/man/man5/slapo-unique.5 @@ -1,5 +1,5 @@ .TH SLAPO-UNIQUE 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2004-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2004-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slapo-valsort.5 b/doc/man/man5/slapo-valsort.5 index 97f8db4..4719053 100644 --- a/doc/man/man5/slapo-valsort.5 +++ b/doc/man/man5/slapo-valsort.5 @@ -1,5 +1,5 @@ .TH SLAPO-VALSORT 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2005-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2005-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME diff --git a/doc/man/man5/slappw-argon2.5 b/doc/man/man5/slappw-argon2.5 index eaeab2b..1a7d6b9 100644 --- a/doc/man/man5/slappw-argon2.5 +++ b/doc/man/man5/slappw-argon2.5 @@ -1,5 +1,5 @@ .TH SLAPPW-ARGON2 5 "RELEASEDATE" "OpenLDAP LDVERSION" -.\" Copyright 2020-2022 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 2020-2024 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .\" $OpenLDAP$ .SH NAME |