• The cn attribute does not contain the name of the attribute which is checked for uniqueness.
• Only one attribute can be specified on which the uniqueness check will be performed.
• If the nsslapd-pluginarg0 attribute begins with attribute=attribute_name, then the server
expects the nsslapd-pluginarg1 attribute to include a markerObjectClass value.
The variable components of the attribute uniqueness plug-in syntax are described in
"Attribute Uniqueness Plug-in
Variable
descriptive_plugin_name
state
attribute_name
dn
attribute= attribute_name
markerObjectClass= objectclass1
requiredObjectClass= objectclass2
Table 18.1. Attribute Uniqueness Plug-in Variables
18.3. Creating an Instance of the Attribute Uniqueness
Plug-in
To ensure that a particular attribute in the directory always has unique values, create an instance of
the Attribute Uniqueness Plug-in for the attribute to check. For example, to ensure that every entry
Creating an Instance of the Attribute Uniqueness Plug-in
Variables".
Definition
Specifies the name of this instance of
the Attribute Uniqueness Plug-in. It is not
required that the name of the attribute for
which to ensure uniqueness be included,
but it is advisable. For example, cn=mail
uniqueness,cn=plugins,cn=config.
Defines whether the plug-in is enabled or
disabled. Acceptable values are on or off. See
Section 18.4.3.1, "Turning the Plug-in On or Off"
for more information.
The name of the attribute for which to ensure
unique values. Only one attribute can be named.
The DN of the suffix or subtree in which to
ensure attribute uniqueness. To specify several
suffixes or subtrees, increment the suffix of the
nsslapd-pluginarg attribute by one for each
additional suffix or subtree.
The name of the attribute for which to ensure
unique values. Only one attribute can be named.
Attribute uniqueness will be checked under
the entry belonging to the DN of the updated
entry that has the object class specified in the
markerObjectClass keyword. Do not include
a space before or after the equals sign.
Optional. When using the markerObjectClass
keyword to specify the scope of the uniqueness
check instead of a DN, it is also possible to
specify to perform the check only if the updated
entry contains the objectclass specified in the
requiredObjectClass keyword. Do not
include a space before or after the equals sign.
Table 18.1,
439
Need help?
Do you have a question about the DIRECTORY SERVER 8.0 - ADMINISTRATION and is the answer not in the manual?
Questions and answers