HP-UX Directory Server Administrator Guide HP-UX Directory Server Version 8.1 (5900-3332, November 2013)

NOTE:
To maintain suffixes using the Directory Server Console, respect the same spacing used to name
the root and sub suffixes in the command line. For example, if a root suffix is named ou=groups
,dc=example,dc=com, with two spaces after groups, any sub suffixes created under this root
will need to specify two spaces after ou=groups, as well.
The following table describes the attributes used to configure a suffix entry:
Table 2 Suffix attributes
ValueAttribute name
Defines the DN for the suffix. The DN is contained in quotes. The value entered takes
the form cn="dc=domain,dc=com",cn=mapping tree, cn=config. This attribute
is required.
dn
Defines the relative DN (RDN) of the entry. This attribute is required.cn
Tells the server that the entry is root or sub suffix entry. It always takes the value
nsMappingTree. This attribute is required.
objectclass
Determines how the suffix handles operations. This attribute takes the following values:nsslapd-state
• backend: The back-end (database) is used to process all operations.
• disabled: The database is not available for processing operations. The server returns
a No such search object error in response to requests made by client applications.
• referral: A referral is returned for requests made to this suffix.
• referral on update: The database is used for all operations except update
requests, which receive a referral.
The default value is disabled.
Defines the LDAP URL of the referral to be returned by the suffix. This attribute can be
multivalued, with one referral per value. This attribute is required when the value of the
nsslapd-state attribute is referral or referral on update.
nsslapd-referral
Gives the name of the database or database link used to process requests. This attribute
can be multivalued, with one database or database link per value. For more information
nsslapd-backend
on database links, see “Creating and Maintaining Database Links” (page 51). This
attribute is required when the value of the nsslapd-state attribute is set to backend
or referral on update.
Specifies the shared library to be used with the custom distribution function. This attribute
is required only when more than one database is specified in the nsslapd-backend
nsslapd-distribution-plugin
attribute. For more information about the custom distribution function, see “Creating and
Maintaining Databases” (page 38).
Specifies the name of the custom distribution function. This attribute is required only when
more than one database is specified in the nsslapd-backend attribute. For more
nsslapd-distribution-funct
information about the custom distribution function, see “Creating and Maintaining
Databases” (page 38).
Provides the DN of the parent entry for a sub suffix. By default, this attribute is not present,
which means that the suffix is regarded as a root suffix. For example, to create a sub
nsslapd-parent-suffix
suffix names o=sales,dc=example,dc=com under the root suffix
dc=example,dc=com, add nsslapd-parent-suffix: "dc=example,dc=com"
to the sub suffix.
Maintaining suffixes
This section describes the following procedures:
• “Disabling a suffix” (page 37)
• “Deleting a suffix” (page 37)
36 Configuring Directory Databases