access to what [ by who accesslevel ]+This option grants access (specified by accesslevel) to a set of entries and/or attributes (specified by what) by one or more requesters (specified by who). See ``Access control'' on access control for more details and examples.
attribute name [name] { bin | ces | cis | tel | dn }
This option associates a syntax with an attribute name. By default, an
attribute is assumed to have syntax cis. An optional alternate
name can be given for an attribute. The possible syntaxes and their meanings
are as follows:
- bin
- binary
- ces
- case exact string (case must match during comparisons)
- cis
- case ignore string (case is ignored during comparisons)
- tel
- telephone number string (like cis but blanks and dashes (-) are ignored during comparisons)
- dn
- distinguished name
config_dn dnThis option specifies the distinguished name to be used for the retrieval of configuration information.
For example:
config_dn cn=local_slapd_configThis entry can then be used to retrieve information (see ``Monitoring slapd''). For example:
ldapsearch -s base -b cn=local_slapd_config 'objectclass=
'
Default: no config_dn set
defaultaccess { none | compare | search | read | write }
This option specifies the default access to grant requesters not matched by
any other access line (see
``Access control'').
Note that an access level implies all lesser access levels (for example,
write access implies read, search and compare).
Default: defaultaccess read
include filenameThis option specifies that slapd should read additional configuration information from the given file before continuing with the next line of the current file. The included file should follow the normal slapd configuration file format. Note that you should be careful when using this option; there is no small limit on the number of nested include options, and no loop detection is done.
loglevel integerThis option specifies the level at which debugging statements and operation statistics should be logged (currently to the LOG_LOCAL4 facility of syslogd(1M)). Log levels are additive. The possible values for integer are as follows:
- 1
- trace function calls
- 2
- debug packet handling
- 4
- heavy trace debugging
- 8
- connection management
- 16
- print out packets sent and received
- 32
- search filter processing
- 64
- configuration file processing
- 128
- access control list processing
- 256
- stats log connections/operations/results
- 512
- stats log entries sent
- 1024
- print communication with shell backends
- 2048
- print entry parsing debugging
For example:
loglevel 255This will cause lots debugging information to be logged.
Default: loglevel 256.
monitor_dn dnThis option specifies a distinguished name to be used in the retrieval of monitoring information. See ``Monitoring interface attributes'' for details of the attributes accessed by the slapd monitoring interface.
For example:
monitor_dn cn=local_slapd_monitorThis entry can then be used to retrieve information (see ``Monitoring slapd''). For example:
ldapsearch -s base -b cn=local_slapd_monitor 'objectclass=
'
Default: no monitor_dn set
objectclass name
[ requires attrs ]
[ allows attrs ]
This option defines the schema rules for the given object class. Used in
conjunction with the schemacheck option. See
``Schema enforcement''
for more details.
phonetic { metaphone | soundex }
This option specifies the phonetic algorithm used by slapd
when doing approximate searches. There is a choice between the metaphone
and soundex algorithms.
Default: phonetic metaphone
referral urlThis option specifies the referral to pass back when slapd cannot find a local database to handle a request.
For example:
referral ldap://ldap.itd.antbear.comThis will refer non-local queries to the LDAP server at Antbear, Lucid & Popp. Smart LDAP clients can re-ask their query at that server, but note that most of these clients are only going to know how to handle simple LDAP URLs that contain a host part and optionally a distinguished name part.
schemacheck { on | off }
This option turns schema checking on or off. If schema checking is
on, entries added or modified will be checked to ensure they obey the schema
rules implied by their object class(es) as defined by the corresponding
objectclass option(s). If schema checking is off this check is not
done.
Default: schemacheck off
sizelimit integerThis option specifies the maximum number of entries to return from a search operation.
Default: sizelimit 500
timelimit integerThis option specifies the maximum number of seconds (in real time) slapd will spend answering a search request. If a request is not finished in this time, a result indicating an exceeded timelimit will be returned.
Default: timelimit 3600