HP-UX Directory Server 8.1 administrator guide

The variable components of the Attribute Uniqueness Plug-in syntax are described in
Table 3-6 “Attribute uniqueness plug-in variables”.
Use the following syntax to specify to perform the uniqueness check below an entry containing
a specified object class:
dn: cn=descriptive_plugin_name,cn=plugins,cn=config
...
nsslapd-pluginEnabled: state
nsslapd-pluginarg0: attribute=attribute_name
nsslapd-pluginarg1: markerObjectClass=objectclass1
nsslapd-pluginarg2: requiredObjectClass=objectclass2
...
• Any value can be given to the cn attribute to name the plug-in. The name should be
descriptive.
• The cn attribute does not contain the name of the attribute, which is checked for uniqueness.
• Only one attribute can be specified on which the uniqueness check will be performed.
• If the nsslapd-pluginarg0 attribute begins with attribute=attribute_name, then
the server expects the nsslapd-pluginarg1 attribute to include a markerObjectClass
value.
The variable components of the attribute uniqueness plug-in syntax are described in
Table 3-6 “Attribute uniqueness plug-in variables”.
Table 3-6 Attribute uniqueness plug-in variables
DefinitionVariable
Specifies the name of this instance of the Attribute Uniqueness Plug-in. It is
not required that the name of the attribute for which to ensure uniqueness be
included, but it is advisable. For example, cn=mail
uniqueness,cn=plugins,cn=config.
descriptive_plugin_name
Defines whether the plug-in is enabled or disabled. Acceptable values are on
or off.
state
The name of the attribute for which to ensure unique values. Only one attribute
can be named. Do not include a space before or after the equals sign.
attribute_name
The DN of the suffix or subtree in which to ensure attribute uniqueness. To
specify several suffixes or subtrees, increment the suffix of the
nsslapd-pluginarg attribute by one for each additional suffix or subtree.
dn
The name of the attribute for which to ensure unique values. Only one attribute
can be named.
attribute=attribute_name
Attribute uniqueness will be checked under the entry belonging to the DN
of the updated entry that has the object class specified in the
markerObjectClass keyword. Do not include a space before or after the
equals sign.
markerObjectClass=objectclass1
Optional. When using the markerObjectClass keyword to specify the scope
of the uniqueness check instead of a DN, it is also possible to specify to perform
the check only if the updated entry contains the object class specified in the
requiredObjectClass keyword. Do not include a space before or after
the equals sign.
requiredObjectClass=objectclass2
3.7.3 Creating an instance of the attribute uniqueness plug-in
To ensure that a particular attribute in the directory always has unique values, create an instance
of the Attribute Uniqueness Plug-in for the attribute to check. For example, to ensure that every
entry in the directory that includes a mail attribute has a unique value for that attribute, create
a mail uniqueness plug-in.
To create an instance of the Attribute Uniqueness Plug-in, modify the Directory Server
configuration to add an entry for the new plug-in under the cn=plugins,cn=config entry.
140 Creating directory entries