SLAPO-ADREMAP - Online Linux Manual PageSection : 5
Updated : RELEASEDATE
Source : OpenLDAP LDVERSION
NAMEslapo-adremap − AD Remap overlay to slapd
SYNOPSISETCDIR/slapd.conf
DESCRIPTIONThe adremap overlay to slapd(8) remaps some attribute values for compatibility between Microsoft AD and older POSIX systems' PAM/NSS clients. It can be configured to convert values of given attributes to lower case, and it can be configured to generate RFC2307-compliant group memberships based on RFC2307bis groups. All mapping is only performed on entries returned as search responses.
CONFIGURATIONThe config directives that are specific to the adremap overlay must be prefixed by adremap−, to avoid potential conflicts with directives specific to the underlying database or to other stacked overlays. overlay adremap This directive adds the adremap overlay to the current database, see slapd.conf(5) for details. These slapd.conf configuration options are defined for the adremap overlay. They must appear after the overlay directive. They can each be specified multiple times: adremap-downcase <attr> Specify an attributeType whose values will all be mapped to lowercase when returned in search responses. adremap-dnmap <dnattr> <targetattr> <newattr> <remoteOC> <localOC> <targetOC> <baseDN> Specify a DN-valued attributeType whose values will be dereferenced. The <targetattr> of the target entry will be retrieved and its value will be added to the <newattr> in the entry. In addition, searches using a filter of the form (&(objectClass=<localOC>)(<newattr>=xxx)) will be rewritten into the form (&(objectClass=<remoteOC>)(<dnattr>=xxx-DN)). This rewrite will accomplished by performing an additional internal search, with subtree scope, using the specified baseDN and a filter of the form (&(objectClass=<targetOC>)(<targetattr>=xxx)).
EXAMPLEThis example configures the adremap overlay to map all uid attributes to lowercase, and create memberUid values for group entries. The mapping will turn requests for posixGroup entries into requests for groupOfNames entries, and the internal search will use inetOrgPerson entries under the ou=People,dc=example,dc=com subtree. Add the following to slapd.conf(5): database <database>
# ...
overlay adremap
adremap-downcase uid
adremap-dnmap member uid memberUid groupOfNames posixGroup inetOrgPerson ou=people,dc=example,dc=comslapd must also load adremap.la, if compiled as a run-time module;
FILESETCDIR/slapd.conf default slapd configuration file
SEE ALSOslapd.conf(5), slapd(8). The slapo-adremap(5) overlay supports dynamic configuration via back-config.
ACKNOWLEDGEMENTSThis module was written in 2015 by Howard Chu. 0
Johanes Gumabo
Data Size : 8,737 byte
man-slapo-adremap.5Build : 2024-12-05, 20:55 :
Visitor Screen : x
Visitor Counter ( page / site ) : 2 / 237,063
Visitor ID : :
Visitor IP : 3.145.43.92 :
Visitor Provider : AMAZON-02 :
Provider Position ( lat x lon ) : 39.962500 x -83.006100 : x
Provider Accuracy Radius ( km ) : 1000 :
Provider City : Columbus :
Provider Province : Ohio , : ,
Provider Country : United States :
Provider Continent : North America :
Visitor Recorder : Version :
Visitor Recorder : Library :
Online Linux Manual Page : Version : Online Linux Manual Page - Fedora.40 - march=x86-64 - mtune=generic - 24.12.05
Online Linux Manual Page : Library : lib_c - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Online Linux Manual Page : Library : lib_m - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Data Base : Version : Online Linux Manual Page Database - 24.04.13 - march=x86-64 - mtune=generic - fedora-38
Data Base : Library : lib_c - 23.02.07 - march=x86-64 - mtune=generic - fedora.36
Very long time ago, I have the best tutor, Wenzel Svojanovsky . If someone knows the email address of Wenzel Svojanovsky , please send an email to johanes_gumabo@yahoo.co.id .
If error, please print screen and send to johanes_gumabo@yahoo.co.id
Under development. Support me via PayPal.