Linux Certif

Toute la documentation sur la certification Linux LPI

slapo-constraint2.4

NAME

slapo-constraint - Attribute Constraint Overlay to slapd

SYNOPSIS

/etc/openldap2.4/slapd.conf

DESCRIPTION

The constraint overlay is used to enforce a regular expression constraint on all values of specified attributes. Attributes can have multiple constraints placed upon them, and all must be satisfied when modifying an attribute value under constraint.

This overlay is intended to be used to force syntactic regularity upon certain string represented data which have well known canonical forms, like telephone numbers, post codes, FQDNs, etc.

CONFIGURATION

This slapd.conf option applies to the constraint overlay. It should appear after the overlay directive.

constraint_attribute <attribute_name> <type> <value>

Specifies the constraint which should apply to the attribute named as the first parameter. At the moment only one type of constraint is supported - regex. The parameter following the regex type is a Unix style regular expression (See regex(7))

Any attempt to add or modify an attribute named as part of the constraint overlay specification which does not fit the regular expression constraint listed will fail with a LDAP_CONSTRAINT_VIOLATION error.

EXAMPLES

constraint_attribute mail regex ^[:alnum:]+@mydomain.com$

A specification like the above would reject any mail attribute which did not look like <alpha-numeric string>@mydomain.com

FILES

/etc/openldap2.4/slapd.conf

default slapd configuration file

SEE ALSO

slapd.conf(5).