Server plug-in functionality reference, 7-bit check plug-in, Acl plug-in – Red Hat 8.1 User Manual

Page 106: 7-bit check plug-in 3.1.2. acl plug-in

Advertising
background image

Chapter 3. Plug-in Implemented Server Functionality Reference

This chapter contains reference information on Red Hat Directory Server plug-ins.

The configuration for each part of Directory Server plug-in functionality has its own separate entry and
set of attributes under the subtree cn=plugins, cn=config.

dn: cn=Telephone Syntax, cn=plugins, cn=config
objectclass: top
objectclass: nsSlapdPlugin
objectclass: extensibleObject
cn: Telephone Syntax
nsslapd-pluginPath: libsyntax-plugin
nsslapd-pluginInitfunc: tel_init
nsslapd-pluginType: syntax
nsslapd-pluginEnabled: on

Some of these attributes are common to all plug-ins while others may be particular to a specific plug-in.
Check which attributes are currently being used by a given plug-in by performing an ldapsearch on
the cn=config subtree.

All plug-ins are instances of the nsSlapdPlugin object class, which in turn inherits from the
extensibleObject object class. For plug-in configuration attributes to be taken into account by the
server, both of these object classes (in addition to the top object class) must be present in the entry, as
shown in the following example:

dn:cn=ACL Plugin, cn=plugins, cn=config
objectclass:top
objectclass:nsSlapdPlugin
objectclass:extensibleObject

3.1. Server Plug-in Functionality Reference

The following tables provide a quick overview of the plug-ins provided with Directory Server, along with
their configurable options, configurable arguments, default setting, dependencies, general performance-
related information, and further reading. These tables assist in weighing plug-in performance gains and
costs and choose the optimal settings for the deployment. The Further Information section cross-
references further reading, where this is available.

3.1.1. 7-bit Check Plug-in

Plug-in Parameter

Description

Plug-in Name

7-bit check (NS7bitAtt)

DN of Configuration Entry

cn=7-bit check, cn=plugins, cn=config

Description

Checks certain attributes are 7-bit clean

Configurable Options

on | off

Default Setting

on

Configurable Arguments

List of attributes (uid mail userPassword)
followed by "," and then suffixes on which the
check is to occur.

Dependencies

None

Performance Related Information

None

Further Information

If the Directory Server uses non-ASCII characters,
such as Japanese, turn this plug-in off.

3.1.2. ACL Plug-in

Plug-in Parameter

Description

Plug-in Name

ACL Plug-in

DN of Configuration Entry

cn=ACL Plugin, cn=plugins, cn=config

Description

ACL access check plug-in

Configurable Options

on | off

Default Setting

on

Configurable Arguments

None

Dependencies

None

Performance Related Information

Access control incurs a minimal performance hit.
Leave this plug-in enabled since it is the primary
means of access control for the server.

Further Information

See the "Managing Access Control" chapter in
the Directory Server Administrator's Guide.

106

Chapter 3. Plug-in Implemented Server Functionality Reference

Advertising