Installation guide

IMPORTANT
The simple paged results are not done using MozLDAP command-line tools. The server supports
simple paged search operations; however, the client tools with Red Hat Directory Server do not.
Therefore, simple paged operations must be done using OpenLDAP command-line tools version
2.4.18 or later or other clients which support simple paged results.
1.11. Configuring the Execution Order for Plug-ins
Generally, plug-ins are not called in a specific order. As in, it is not possible to define that Preoperation
Plug-in A is always called before Preoperation Plug-in B. It can be convenient, however, to set one
preoperation or postoperation plug-in to complete its job before the next plug-in is executed. T his can
allow more complex interactions between plug-ins and more specific functionality for plug-ins.
A new plug-in configuration attribute, nsslapd-pluginPrecedence has been added which sets the load
order preference for the plug-in, anywhere from 1 to 99. The smaller the number, the higher the
precedence.
IMPORTANT
Changing the execution order of the default plug-ins in Red Hat Directory Server is not supported
and is strongly discouraged. Core functionality should not be altered.
This new feature is intended to set the execution order of custom plug-ins to add more flexibility
to deploying custom functionality.
1.12. Using a Named Pipe in Place of Server Logs
Many administrators want to do some special configuration or operation with logging data, like
configuring an access log to record only certain events. This is not possible using the standard
Directory Server log file configuration attributes, but it is possible by sending the log data to a named
pipe, and then using another script or plug-in to process the data. Using a named pipe for the log
simplifies these special tasks, like:
Logging certain events, like failed bind attempts or connections from specific users or IP addresses
Logging entries which match a specific regular expression pattern
Keeping the log to a certain length (logging only the last number of lines)
Sending a notification, such as an email, when an event occurs
A new script, ds-logpipe.py, has been added to the Directory Server command-line tools to enable
logs to be replaced by a named pipe.
1.13. Adding Support for Using PAM for Pass-THrough Authentication
A new plug-in allows administrators to use the pluggable authentication module (PAM) configuration
within existing infrastructure for pass-through authentication for Directory Server users.
1.14. Upgrading DN Syntax to Comply with RFC 4514
In Red Hat Directory Server 8.0 and 8.1, DN syntax was defined by standards like RFC 2253. In Red Hat
Directory Server 8.2, DNs are validated against the more strict syntax in RFC 4514. T his means that
Red Hat Directory Server 8.2 Red Hat Directory Server 8.2 Release Notes
4