mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-27 03:20:22 +08:00
80 lines
2.4 KiB
Groff
80 lines
2.4 KiB
Groff
.TH SLAPO-CHAIN 5 "RELEASEDATE" "OpenLDAP LDVERSION"
|
|
.\" Copyright 1998-2005 The OpenLDAP Foundation, All Rights Reserved.
|
|
.\" Copying restrictions apply. See the COPYRIGHT file.
|
|
.\" $OpenLDAP$
|
|
.SH NAME
|
|
slapo-chain \- chain overlay
|
|
.SH SYNOPSIS
|
|
ETCDIR/slapd.conf
|
|
.SH DESCRIPTION
|
|
The
|
|
.B chain
|
|
overlay to
|
|
.BR slapd (8)
|
|
allows automatic referral chasing.
|
|
Any time a referral is returned (except for bind operations),
|
|
it is chased by using an instance of the ldap backend.
|
|
If operations are performed with an identity (i.e. after a bind),
|
|
that identity can be asserted while chasing the referrals
|
|
by means of the \fIidentity assertion\fP feature of back-ldap
|
|
(see
|
|
.BR slapd-ldap (5)
|
|
for details), which is essentially based on the
|
|
.B proxyAuthz
|
|
control (see \fIdraft-weltman-ldapv3-proxy\fP for details).
|
|
|
|
.LP
|
|
The config directives that are specific to the
|
|
.B chain
|
|
overlay can be prefixed by
|
|
.BR chain\- ,
|
|
to avoid potential conflicts with directives specific to the underlying
|
|
database or to other stacked overlays.
|
|
|
|
.LP
|
|
There are no chain overlay specific directives; however, directives
|
|
related to the \fIldap\fP database that is implicitly instantiated
|
|
by the overlay may assume a special meaning when used in conjuction
|
|
with this overlay. They are described in
|
|
.BR slapd-ldap (5).
|
|
.TP
|
|
.B overlay chain
|
|
This directive adds the chain overlay to the current backend.
|
|
The chain overlay may be used with any backend, but it is mainly
|
|
intended for use with local storage backends that may return referrals.
|
|
It is useless in conjunction with the \fIldap\fP and \fImeta\fP backends
|
|
because they already exploit the libldap specific referral chase feature.
|
|
.TP
|
|
.B chain-uri <ldapuri>
|
|
This directive instructs the underlying ldap database about which
|
|
URI to contact to chase referrals.
|
|
If not present, the referral itself is parsed, and the protocol/host/port
|
|
portions are used to establish a connection.
|
|
|
|
.LP
|
|
Directives for configuring the underlying ldap database may also
|
|
be required, as shown here:
|
|
.LP
|
|
.RS
|
|
.nf
|
|
chain-idassert-method "simple"
|
|
chain-idassert-authcDN "cn=Auth,dc=example,dc=com"
|
|
chain-idassert-passwd "secret"
|
|
chain-idassert-mode "self"
|
|
.fi
|
|
.RE
|
|
.LP
|
|
Any valid directives for the ldap database may be used; see
|
|
.BR slapd-ldap (5)
|
|
for details.
|
|
.SH FILES
|
|
.TP
|
|
ETCDIR/slapd.conf
|
|
default slapd configuration file
|
|
.SH SEE ALSO
|
|
.BR slapd.conf (5),
|
|
.BR slapd\-ldap (5),
|
|
.BR slapd (8).
|
|
.SH AUTHOR
|
|
Originally implemented by Howard Chu.
|