Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual page 105

Components Allowed to Chain (Continued)
Table 3-2
Component Name Description
Certificate-based This component is used when the SASL-external bind
authentication method is used. It retrieves the user certificate from the
checking database on the remote server. If you allow this component
component to chain, certificate-based authentication can work with a
database link. To chain this component's operations, specify
the following:
nsActiveChainingComponents:
cn=certificate-based
authentication,cn=components,cn=config
Referential This plug-in ensures that updates made to attributes
Integrity Plug-in containing DNs are propagated to all entries that contain
pointers to the attribute. For example, if you delete an entry
that is a member of a group, the entry is automatically
removed from the group. Using this plug-in with chaining
helps simplify the management of static groups when the
group members are remote to the static group definition.
To chain this component's operations, specify the following:
nsActiveChainingComponents: cn=referential
integrity postoperation,cn=plugins,cn=config
Attribute This plug-in checks that all the values for a specified uid
Uniqueness attribute are unique (no duplicates). If you allow this
Plug-in plug-in to chain, it confirms that the uid attribute values are
unique even on attributes changed through a database link.
To chain this component's operations, specify the following:
nsActiveChainingComponents: cn=attribute
uniqueness,cn=plugins,cn=config
Creating and Maintaining Database Links
Permissions
Read, search, and
compare
Read, write, search, and
compare
Read, search, and
compare
Chapter 3 Configuring Directory Databases 105