HP-UX Directory Server 8.1 administrator guide

Restrict the scope of the check by using the requiredObjectClass keyword, as shown in the
following example:
dn: cn=mail uniqueness,cn=plugins,cn=config
...
nsslapd-pluginEnabled: on
nsslapd-pluginarg0: attribute=mail
nsslapd-pluginarg1: markerObjectClass=ou
nsslapd-pluginarg2: requiredObjectClass=person
...
The markerObjectClass or requiredObjectClass keywords cannot be repeated by
incrementing the counter in the nsslapd-pluginarg attribute suffix. These keywords can
only be used once per Attribute Uniqueness Plug-in instance.
NOTE:
The nsslapd-pluginarg0 attribute always contains the name of the attribute for which to
ensure uniqueness.
3.7.5 Attribute uniqueness plug-in syntax examples
This section contains examples of Attribute Uniqueness Plug-in syntax in the dse.ldif file.
• “Specifying one attribute and one subtree”
• “Specifying one attribute and multiple subtrees”
3.7.5.1 Specifying one attribute and one subtree
This example configures the plug-in to ensure the uniqueness of the mail attribute under the
dc=example,dc=com subtree.
dn: cn=mail uniqueness,cn=plugins,cn=config
...
nsslapd-pluginEnabled: on
nsslapd-pluginarg0: mail
nsslapd-pluginarg1: dc=example,dc=com
...
3.7.5.2 Specifying one attribute and multiple subtrees
It is possible to use a single plug-in instance to check for the uniqueness of an attribute within
multiple subtrees, which means that the attribute value must be unique within each subtree but
not unique across all subtrees. This example configures the Attribute Uniqueness Plug-in to
ensure the uniqueness of the mail attribute for separate subtrees,
l=Chicago,dc=example,dc=com and l=Boston,dc=example,dc=com.
dn: cn=mail uniqueness,cn=plugins,cn=config
...
nsslapd-pluginEnabled: on
nsslapd-pluginarg0: mail
nsslapd-pluginarg1: l=Chicago,dc=example,dc=com
nsslapd-pluginarg2: l=Boston,dc=example,dc=com
...
NOTE:
The nsslapd-pluginarg0 attribute always contains the name of the attribute for which to
ensure uniqueness. All other occurrences of the nsslapd-pluginarg, such as
nsslapd-pluginarg1, contain DNs.
With this configuration, the plug-in allows an instance of a value for the mail attribute to exist
once under the l=Chicago,dc=example,dc=com subtree and once under the
3.7 Enforcing attribute uniqueness 143