SLAPD.OVERLAYS(5)

📦
version 2.7.2 · 24 versions
, in arch rolling

💖 SLAPD.OVERLAYS(5) 💖

okay bestie, welcome to the glow-up guide for slapd.overlays — the overlays for slapd, the stand-alone LDAP daemon. this is a File Formats Manual situation and it is lowkey iconic 🫶

✨ NAME ✨

slapd.overlays — overlays for slapd, the stand-alone LDAP daemon 💅

🌸 DESCRIPTION 🌸

so the slapd(8) daemon can use a whole variety of different overlays to alter or extend the normal behavior of a database backend. no cap. these overlays may be compiled statically into slapd, or — when module support is enabled — they may be dynamically loaded. most of the overlays are only allowed to be configured on individual databases, but some may also be configured globally. it's giving flexible 💖

configuration options for each overlay are documented separately in the corresponding slapo-<overlay>(5) manual pages. go read those for the tea ☕

here's the whole lineup, and yes, every single one is here, we do not skip entries in this house:

  • accesslog — Access Logging. this overlay can record accesses to a given backend database on another database. bestie it literally keeps receipts 🧾
  • auditlog — Audit Logging. this overlay records changes on a given backend database to an LDIF log file. by default it is not built, so don't come for it if it's missing 💀
  • autoca — Automatic Certificate Authority overlay. this overlay can generate X.509 certificate/key pairs for entries in the directory if slapd is linked to OpenSSL. also by default not built. queen of being optional 🎀
  • chain — Chaining. this overlay allows automatic referral chasing when a referral would have been returned — either when configured by the server or when requested by the client. no more dead-end referrals, we chase 🏃‍♀️
  • collect — Collective Attributes. this overlay implements RFC 3671 collective attributes; these attributes share common values over all the members of the collection as inherited from an ancestor entry. it's giving family traits 🌈
  • constraint — Constraint. this overlay enforces a regular expression constraint on all values of specified attributes. it's used to enforce a more rigorous syntax when the underlying attribute syntax is too general. strict but fair ✨
  • dds — Dynamic Directory Services. this overlay supports dynamic objects, which have a limited life after which they expire and are automatically deleted. they simply vanish, main character exit 💨
  • deref — Dereference Control. this overlay implements the draft Dereference control. the overlay can be used with any backend or globally for all backends. versatile icon 👑
  • dyngroup — Dynamic Group. this is a demo overlay which extends the Compare operation to detect members of a dynamic group. it has no effect on any other operations. literally just the one trick and it ate 🔥
  • dynlist — Dynamic List. this overlay allows expansion of dynamic groups and more. and more!! we love a mystery 😭
  • homedir — Home Directory Provisioning. this overlay manages creation/deletion of home directories for LDAP-based Unix accounts. home sweet home 🏠
  • memberof — MemberOf. this overlay maintains automatic reverse group membership values, typically stored in an attribute called memberOf. this overlay is deprecated and should be replaced with dynlist. ⚠️ bestie please migrate, this one's in its flop era
  • otp — OATH One-Time Password module. this module allows time-based one-time password, AKA "authenticator-style", and HMAC-based one-time password authentication to be used in conjunction with a standard LDAP password for two factor authentication. 2FA girlies rise 🔐
  • pbind — Proxybind. this overlay forwards simple bind requests on a local database to a remote LDAP server. passing the vibe along 📨
  • pcache — Proxycache. this overlay allows caching of LDAP search requests in a local database. it is most often used with the slapd-ldap(5) or slapd-meta(5) backends. memory queen 🧠✨
  • ppolicy — Password Policy. this overlay provides a variety of password control mechanisms, e.g. password aging, password reuse and duplication control, mandatory password resets, etc. the hall monitor of passwords 🚨
  • refint — Referential Integrity. this overlay can be used with a backend database such as slapd-mdb(5) to maintain the cohesiveness of a schema which utilizes reference attributes. keeping the schema tight and cohesive fr fr 🫶
  • remoteauth — Remote Authentication. this overlay delegates authentication requests to remote directories. it's not doing the work, it's delegating — very manager of it 💼
  • retcode — Return Code. this overlay is useful to test the behavior of clients when server-generated erroneous and/or unusual responses occur. chaos testing but make it deliberate 😈
  • rwm — Rewrite/remap. this overlay is experimental. it performs basic DN/data rewrite and objectClass/attributeType mapping. experimental means proceed with caution babes 🧪
  • sssvlv — Server Side Sorting and Virtual List Views. this overlay implements the RFC2891 server-side sorting control and virtual list view controls, and replaces the RFC2696 paged-results implementation to ensure it works with the sorting technique. the upgrade we needed 🔥
  • syncprov — Syncrepl Provider. this overlay implements the provider-side support for syncrepl replication, including persistent search functionality. provider energy, the one everyone depends on 👑
  • translucent — Translucent Proxy. this overlay can be used with a backend database such as slapd-mdb(5) to create a "translucent proxy". content of entries retrieved from a remote LDAP server can be partially overridden by the database. see-through but make it ✨ aesthetic ✨
  • unique — Attribute Uniqueness. this overlay can be used with a backend database such as slapd-mdb(5) to enforce the uniqueness of some or all attributes within a subtree. there can only be one 💅
  • valsort — Value Sorting. this overlay can be used to enforce a specific order for the values of an attribute when it is returned in a search. alphabetized and unbothered 📚

📁 FILES 📁

  • /etc/openldap/slapd.conf — default slapd configuration file
  • /etc/openldap/slapd.d — default slapd configuration directory

👀 SEE ALSO 👀

🫶 ACKNOWLEDGEMENTS 🫶

OpenLDAP Software is developed and maintained by The OpenLDAP Project <http://www.openldap.org/>. OpenLDAP Software is derived from the University of Michigan LDAP 3.3 Release. absolute pioneers, we stan the lineage 💜

and that's the whole page bestie, slay 💅✨ this was SLAPD.OVERLAYS(5) from OpenLDAP 2.7.2, dated 2026/10/21 — mwah, go configure something iconic 🎀🦋

📦 where this page comes from