Red Hat DIRECTORY SERVER 8.1 Command Reference Manual page 61

2.3.1.86. nsslapd-readonly (Read Only)
This attribute sets whether the whole server is in read-only mode, meaning that neither data in the
databases nor configuration information can be modified. Any attempt to modify a database in read-
only mode returns an error indicating that the server is unwilling to perform the operation.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.87. nsslapd-referral (Referral)
This multi-valued attribute specifies the LDAP URLs to be returned by the suffix when the server
receives a request for an entry not belonging to the local tree; that is, an entry whose suffix does not
match the value specified on any of the suffix attributes. For example, assume the server contains only
entries:
ou=People,dc=example,dc=com
but the request is for this entry:
ou=Groups,dc=example,dc=com
In this case, the referral would be passed back to the client in an attempt to allow the LDAP client to
locate a server that contains the requested entry. Although only one referral is allowed per Directory
Server instance, this referral can have multiple values.
NOTE
To use SSL and TLS communications, the referral attribute should be in the form
ldaps://server-location.
Start TLS does not support referrals.
For more information on managing referrals, see the "Configuring Directory Databases" chapter in the
Directory Server Administrator's Guide.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Description
cn=config
on | off
off
DirectoryString
nsslapd-readonly: off
Description
cn=config
Any valid LDAP URL in the form ldap://server-
location
DirectoryString
cn=config
47