NAME
slapd-dnssrv - DNS SRV referral backend to slapd
SYNOPSIS
/etc/ldap/slapd.conf
DESCRIPTION
The DNSSRV backend to
slapd(8)
serves up referrals based upon SRV resource records held in
the Domain Name System.
This backend is experimental.
CONFIGURATION
The DNSSRV backend has no backend nor database specific options.
It is configured simply by "database dnssrv" followed a suffix
directive, e.g. suffix "".
ACCESS CONTROL
The
dnssrv
backend does not honor all ACL semantics as described in
slapd.access(5).
In fact, this backend only implements the
search
operation when the
manageDSAit
control (RFC3296) is used, otherwise for every operation a referral,
whenever appropriate, or an error is returned.
Currently, there is no means to condition the returning of the referral
by means of ACLs; no access control is implemented, except for
read (=r)
access to the returned entries, which is actually provided by the frontend.
Note, however, that the information returned by this backend is collected
through the DNS, so it is public by definition.
FILES
/etc/ldap/slapd.conf
default slapd configuration file
SEE ALSO
"OpenLDAP Root Service - An experimental LDAP referral
service"
[RFC 3088],
"OpenLDAP LDAP Root Service" <http://www.openldap.org/faq/?file=393)>,
slapd.conf(5),
slapd(8)
