SLAPO-CLOAK(5)

💅 SLAPO-CLOAK(5) — the attribute cloak overlay, bestie edition

okay so real talk, this is a page from the File Formats Manual and it's about slapo-cloak, aka the Attribute cloak overlay to slapd. yes the name is doing a lot but stay with me, it's actually so good 🫶

---

✨ NAME ✨

slapo-cloak — the Attribute cloak overlay to slapd. she hides things. iconically. 🔥

---

🦋 SYNOPSIS 🦋

ETCDIR/slapd.conf

yes bestie, that's it. that's the whole synopsis. it's giving minimalism 💅

---

🌸 DESCRIPTION 🌸

okay so the cloak overlay to slapd(8) literally just lets the server hide specific attributes unless the client explicitly asks for them. no cap.

the way this slays: it improves performance when a client requests all attributes and gets back a huge binary attribute that is of absolutely no interest to it 😭 like imagine being handed a whole photo you didn't ask for. not the vibe. cloak says nope, you're not seeing that unless you specifically request it.

and a lil heads up — this whole behavior gets disabled when the manageDSAit control (RFC 3296) is used. like, the cloak comes off. periodt. 🧚

---

🎀 CONFIGURATION 🎀

the config directives that are specific to the cloak overlay must be prefixed by cloak-, so they don't conflict with directives specific to the underlying database or to other stacked overlays. naming your children properly, honestly 👑

• overlay cloak — this directive adds the cloak overlay to the current database, or to the frontend if it's used before any database instantiation; peep slapd.conf(5) for the details. 💖

the following slapd.conf configuration option is defined for the cloak overlay. it may have multiple occurrences, and it must appear after the overlay directive:

• cloak-attr <attribute> [<class>] — here <attribute> is the name of the attribute that will be cloaked. 🌈
  • the optional <class> restricts cloaking only to entries of the named <class>. so like, cloak-with-a-filter. we love a selective queen ✨

---

💜 EXAMPLE 💜

this example hides the jpegPhoto attribute. add the following to slapd.conf:

database <database>
# ...

overlay cloak
cloak-attr jpegPhoto

and that's it — slapd loads cloak.la, if it's compiled as a run-time module; slay 💅

---

🍓 FILES 🍓

• ETCDIR/slapd.conf — the default slapd configuration file. home base 🏠

---

⭐ SEE ALSO ⭐

slapd.conf(5), slapd(8). also bestie — the slapo-cloak(5) overlay supports dynamic configuration via back-config. so you can do it live, no restart drama 🔥

---

🌟 ACKNOWLEDGEMENTS 🌟

this module was originally written in 2008 by Emmanuel Dreyfus. giving legend behavior, we stan 🫶

---

ngl the whole point is: hide the attributes nobody asked for, keep the ones they did, and turn it all off when manageDSAit shows up. simple, iconic, done 💖

---

and that's the page, bestie 🎀 this was OpenLDAP version LDVERSION, released RELEASEDATE — catch you on the next one, mwah 💋✨