HP-UX Directory Server 8.1 administrator guide

NOTE:
To maintain suffixes using the Directory Server Console, respect the same spacing used to name
the root and sub suffixes in the command line. For example, if a root suffix is named ou=groups
,dc=example,dc=com, with two spaces after groups, any sub suffixes created under this root
will need to specify two spaces after ou=groups, as well.
The following table describes the attributes used to configure a suffix entry:
Table 2-1 Suffix attributes
ValueAttribute name
Defines the DN for the suffix. The DN is contained in quotes. The value entered takes
the form cn="dc=domain,dc=com",cn=mapping tree, cn=config. This attribute
is required.
dn
Defines the relative DN (RDN) of the entry. This attribute is required.cn
Tells the server that the entry is root or sub suffix entry. It always takes the value
nsMappingTree. This attribute is required.
objectclass
Determines how the suffix handles operations. This attribute takes the following values:
• backend: The back-end (database) is used to process all operations.
• disabled: The database is not available for processing operations. The server
returns a No such search object error in response to requests made by client
applications.
• referral: A referral is returned for requests made to this suffix.
• referral on update: The database is used for all operations except update
requests, which receive a referral.
The default value is disabled.
nsslapd-state
Defines the LDAP URL of the referral to be returned by the suffix. This attribute can
be multivalued, with one referral per value. This attribute is required when the value
of the nsslapd-state attribute is referral or referral on update.
nsslapd-referral
Gives the name of the database or database link used to process requests. This attribute
can be multivalued, with one database or database link per value. For more information
on database links, see “Creating and maintaining database links” (page 52). This
attribute is required when the value of the nsslapd-state attribute is set to backend
or referral on update.
nsslapd-backend
Specifies the shared library to be used with the custom distribution function. This
attribute is required only when more than one database is specified in the
nsslapd-backend attribute. For more information about the custom distribution
function, see “Creating and maintaining databases” (page 39).
nsslapd-distribution-plugin
Specifies the name of the custom distribution function. This attribute is required only
when more than one database is specified in the nsslapd-backend attribute. For
more information about the custom distribution function, see “Creating and maintaining
databases”.
nsslapd-distribution-funct
Provides the DN of the parent entry for a sub suffix. By default, this attribute is not
present, which means that the suffix is regarded as a root suffix. For example, to create
a sub suffix names o=sales,dc=example,dc=com under the root suffix
dc=example,dc=com, add nsslapd-parent-suffix: "dc=example,dc=com"
to the sub suffix.
nsslapd-parent-suffix
2.2.2 Maintaining suffixes
This section describes the following procedures:
• “Disabling a suffix”
• “Deleting a suffix”
2.2 Creating and maintaining suffixes 37