Attribute Uniqueness Plug-In Syntax - Red Hat DIRECTORY SERVER 8.0 - ADMINISTRATION Administration Manual

Chapter 18. Using the Attribute Uniqueness Plug-in
Directory Server provides a default instance of the Attribute Uniqueness Plug-in, the UID Uniqueness
Plug-in, to ensure that values given to the uid attribute are unique in the root suffix (the suffix
corresponding to the userRoot database) configured when the Directory Server was first set up.
This plug-in is disabled by default because it affects the operation of multi-master replication. For
information on using the attribute uniqueness plug-in in a replicated environment, refer to
"Replication and the Attribute Uniqueness

18.2. Attribute Uniqueness Plug-in Syntax

Configuration information for the Attribute Uniqueness Plug-in is specified in an entry under
cn=plugins,cn=config entry. There are two possible syntaxes for nsslapd-pluginarg
attributes.
NOTE
To enforce uniqueness of another attribute than the ones in these example, copy and
paste the default Attribute Uniqueness Plug-in entry, and being care to change only the
attributes described here.
Use the following syntax to perform the uniqueness check under a suffix or subtree:
dn: cn=descriptive_plugin_name,cn=plugins,cn=config
...
nsslapd-pluginEnabled: state
nsslapd-pluginarg0: attribute_name
nsslapd-pluginarg1: dn1
nsslapd-pluginarg2: dn2
...
• Any value can be given to the cn attribute to name the plug-in. The name should be descriptive.
• The cn attribute does not contain the name of the attribute which is checked for uniqueness.
• Only one attribute can be specified on which the uniqueness check will be performed.
• It is possible to specify several DNs of suffixes or subtrees in which to perform the uniqueness
check by incrementing the nsslapd-pluginarg attribute suffix by one each time.
The variable components of the Attribute Uniqueness Plug-in syntax are described in
"Attribute Uniqueness Plug-in
Use the following syntax to specify to perform the uniqueness check below an entry containing a
specified object class:
dn: cn=descriptive_plugin_name,cn=plugins,cn=config
...
nsslapd-pluginEnabled: state
nsslapd-pluginarg0: attribute=attribute_name
nsslapd-pluginarg1: markerObjectClass=objectclass1
nsslapd-pluginarg2: requiredObjectClass=objectclass2
...
• Any value can be given to the cn attribute to name the plug-in. The name should be descriptive.
438
Plug-in".
Variables".
Section 18.6,
Table 18.1,