SLAPO-PBIND(5)

📦
version 2.7.2 · 24 versions
, in arch rolling

💖 SLAPO-PBIND — the proxy bind overlay 💖

okay bestie, gather round, because this is the slapo-pbind page from the File Formats Manual section, and it's lowkey one of those tiny pages that does one thing extremely well. sit with me. 🫶

✨ NAME ✨

slapo-pbind — the proxy bind overlay for slapd. that's it, that's the whole vibe. 🌸

📜 SYNOPSIS 📜

/etc/openldap/slapd.conf

yep. that's the whole synopsis. it's giving minimal. it's giving "my config lives here". 💅

🦋 DESCRIPTION 🦋

so the pbind overlay for slapd(8) does one extremely specific little job, and honestly? iconic for it. it forwards Simple Binds on a local database to a remote LDAP server instead of handling them locally. so like — the bind doesn't stay home, it goes on a lil trip to a remote server. ✈️

and the way it manages that remote connection? through an instance of the ldap backend. no cap.

now here's the part where you go "wait, does pbind have its own whole config language?" and the answer is no bestie, it does NOT. 🛑 the pbind overlay uses a subset of the ldap backend's config directives. and if you want the full tea on those directives, they're described in more detail over in slapd-ldap(5). go read that one too, i'm literally begging. 🙏

important note, don't skip this one: this overlay is built into the ldap backend — it is not a separate module. so don't go looking for a module file, she's already in there, she lives there, she's a resident. 💀

here are the directives she'll actually let you use:

  • overlay pbind — this directive adds the proxy bind overlay to the current backend. the proxy bind overlay may be used with any backend, but it's mainly intended for use with local storage backends. so yes she can sit at any table, but she's really there for the local storage ones. 🍓
  • uri <ldapurl> — LDAP server to use. that's your destination, your target, your little remote friend. 🎀
  • tls <TLS parameters> — specify the use of TLS. lock it down, babe. 🔒
  • network-timeout <time> — set the network timeout. because waiting forever is NOT the move. ⏳
  • quarantine <quarantine parameters> — turns on quarantine of URIs that returned LDAP_UNAVAILABLE. basically: if a URI ghosted you with LDAP_UNAVAILABLE, it goes in timeout. not me sending them to quarantine jail. 🙈

📁 FILES 📁

  • /etc/openldap/slapd.conf — the default slapd configuration file. the classic. the original. the one everybody knows. ⭐

👀 SEE ALSO 👀

go read these too, they're all connected, iykyk:

👑 AUTHOR 👑

Howard Chu — yes, THE Howard Chu. respect the legend. 🫡

and that's the whole page, bestie. this one shipped as part of OpenLDAP 2.7.2, dated 2026/10/21 — so when you see that version and that date, that's exactly the build you're holding. slay, go proxy some binds responsibly. 💖✨🎀

📦 where this page comes from