SLAPO-ALLOP(5)

💅 SLAPO-ALLOP — the All Operational Attributes overlay, bestie edition 🎀

okay so we're talking about SLAPO-ALLOP, a File Formats Manual situation, and honestly? It's a little icon of a page. Let me put you on. 🫶

---

✨ NAME ✨

slapo-allop — the All Operational Attributes overlay. That's the whole name, that's the whole vibe. 💖

🌸 SYNOPSIS 🌸

/etc/openldap/slapd.conf

That's the file you're gonna be living in, bestie. 🗂️

🦋 DESCRIPTION 🦋

okay so picture this: the All Operational Attributes overlay exists purely so slapd can play nice with dumb clients — and yes, that's the actual energy — clients that expect all attributes to come back, including the operational ones, whenever they ask for "*" or hand over an empty attribute list.

Which is, like… not what RFC2251 and RFC3673 say. Not even a little. 😭 Those specs say something else entirely, and this overlay is out here doing its own thing so the messy clients don't have a meltdown. it's giving "beauty and grace under pressure", honestly. ✨

👑 CONFIGURATION 👑

These slapd.conf options apply to the All Operational overlay. and like, placement matters, bestie — they should appear after the overlay directive and before any subsequent database directive. do not skip that, fr fr. 💅

• allop-URI <ldapURI> — this is the one. It specifies the base and the scope of the search operations that trigger the overlay.

By default it's "ldap:///??base", i.e. it only applies to the rootDSE. cute, small, contained. 💖

Also important: this requires the overlay to be instantiated as global. no cap. 🔥

🌈 EXAMPLES 🌈

default behavior: only affects requests to the rootDSE — the chill, low-key version:

# global
overlay         allop

affects all requests — the main character version, scope set to sub:

# global
overlay         allop
allop-URI       "ldap:///??sub"

affects only requests directed to the suffix of a database — the ✨sophisticated✨ per-database version:

# per database
database        mdb
suffix          "dc=example,dc=com"
# database specific directives ...
overlay         allop
allop-URI       "ldap:///dc=example,dc=com??base"

like… ate. every single one. 🔥

🍓 FILES 🍓

• /etc/openldap/slapd.conf — the default slapd configuration file. she's the blueprint, she's the moment. 🎀

🧚 SEE ALSO 🧚

slapd.conf(5) — go read her too, iykyk. 💜

⭐ ACKNOWLEDGEMENTS ⭐

This module was written in 2005 by Pierangelo Masarati for SysNet s.n.c. — a genuine legend, we stan. 👑

---

💀 real talk bestie: this overlay is out here deliberately going against RFC2251 and RFC3673 so that clients expecting everything (operational attributes included) get what they want when they ask for "*" or an empty attribute list. and remember — allop-URI has to sit after overlay and before the next database directive, and it needs the overlay instantiated as global. 🙈

---

okay that's the page!! this beauty is from OpenLDAP 2.6.16, dated 2026/10/21 — screenshot it, memorize it, slay the exam 💅✨🦋