Red Hat DIRECTORY SERVER 8.0, Administration Manual, Page: 461 / 552

Attribute Uniqueness Plug-in Syntax Examples
443
18.4.3.3. Using the markerObjectClass and requiredObjectClass
Keywords
Instead of specifying a suffix or subtree in the configuration of an Attribute Uniqueness Plug-in,
perform the check under the entry belonging to the DN of the updated entry that has the object class
given in the
markerObjectClass
keyword.
To specify to perform the uniqueness check under the entry in the DN of the updated entry that
contains the organizational unit (
ou
) object class, copy and paste an existing Attribute Uniqueness
Plug-in entry, and change the following attributes:
ldapmodify -p 389 -D "cn=directory manager" -w secret -h ldap.example.com
dn: cn=mail uniqueness,cn=plugins,cn=config
...
nsslapd-pluginEnabled: on
nsslapd-pluginarg0: attribute=mail
nsslapd-pluginarg1: markerObjectClass=ou
...
If the server should not check every entry in the organization unit, limit the scope by setting the check
to be performed only if the updated entry contains a specified object class.
For example, if the uniqueness of the
mail
attribute is checked, it is probably only necessary to
perform the check when adding or modifying entries with the
person
or
inetorgperson
object
class.
Restrict the scope of the check by using the
requiredObjectClass
keyword, as shown in the
following example:
dn: cn=mail uniqueness,cn=plugins,cn=config
...
nsslapd-pluginEnabled: on
nsslapd-pluginarg0: attribute=mail
nsslapd-pluginarg1: markerObjectClass=ou
nsslapd-pluginarg2: requiredObjectClass=person
...
The
markerObjectClass
or
requiredObjectClass
keywords
cannot
be repeated by
incrementing the counter in the
nsslapd-pluginarg
attribute suffix. These keywords can only be
used once per Attribute Uniqueness Plug-in instance.
NOTE
The
nsslapd-pluginarg0
attribute always contains the name of the attribute for which
to ensure uniqueness.
18.5. Attribute Uniqueness Plug-in Syntax Examples
This section contains examples of Attribute Uniqueness Plug-in syntax in the
dse.ldif
file.
•
Section 18.5.1, “Specifying One Attribute and One Subtree”
•
Section 18.5.2, “Specifying One Attribute and Multiple Subtrees”