[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Open LDAP - How to define an additionnal "uid" like attribute equivalent to a RDMS unique key index
- To: openldap-technical@openldap.org
- Subject: Re: Open LDAP - How to define an additionnal "uid" like attribute equivalent to a RDMS unique key index
- From: Clément OUDOT <clement.oudot@worteks.com>
- Date: Thu, 2 May 2019 09:38:50 +0200
- Autocrypt: addr=clement.oudot@worteks.com; prefer-encrypt=mutual; keydata= xsFNBFyI3d8BEADF5/FeKnEnp4377cXfeQl8E08Ndi+j0G7ACF6seqQs15VWRyAJ3JrHrN5+ AHSPEEIspiiJRJ2SExQLuwvHKMYpAeA9RiLQ4hrV68J8O6J+7up/VMFNCPehAVnvLn8dS4IY DTxlt1WH+euyY+xy6Fp4zfKKLsv6/7TJw6Bs+NB+VCHbGd4/OMuqiHg7DM4A2zCRts4vRfJA VMQ7Gyhl3cogQTWWYf0V8y/6KYW0dhKb5CZNKQvnnDy3WYE2pkdcYKy/KzdxFEywTV9SPR5o Ha/Wcu2nbVjEEihrPSym1VQD1J9+cZT6jbBWS5kFCGXmdv2XVVeDp9M+NFD+ML6PdMQcIdbX 1L43PSkTbGn4i3BkI+zrd/EECdqbomiHj7HG2fzGXW1PKUMUBOuLUSgIQJwxXPDZhxEPV7S4 ef9yVULXUa2srMbGFRVdKg4tdMKiDBjCdh46rTx3oprAKRGcUqLda1OgCzfYCTOzi9AUWqeX A3nQQ+G6270Nadhp8dmDkI9Brjp3kFoh62DO/W73Owoq+RWAB2paNMRRfB+N2v+osJEABYw4 bNRjJaO8HWZ+KqpHqlcGwH5gDMeLDVFwuMRT3L5oT+T9wbzVruA/3OWGaXgrq3JHbNTbJ/DD H20ul1i7kQ2WSHwS5PJb3qc3kxNu8E3Y8nWphZ4jBXi784tFqwARAQABzSpDbMOpbWVudCBP VURPVCA8Y2xlbWVudC5vdWRvdEB3b3J0ZWtzLmNvbT7CwY4EEwEKADgWIQRhpMZRttqI3sBu FnYPcU6fajaXIgUCXIjd3wIbIwULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRAPcU6fajaX ImfbD/459HBdqzTFaOQpZVL5Q85t8MgO2fd916qRDK1lbmZih9thOzT500fIe0nh021E4iSa HwoOdWA/vg5ckY41SlHkm/4lZqEwKTIBb/3w/cDrD2OHVuPA8C7MJQAG6Y98JVIaEryS5zJe dYSHd7tYKCx5IyVyAL+JVv3rDDT8z83j5PW7p5P8Z4W8fgadP7vRohbbaykDxBtmu6pUCucM oyorpy+q3D7/gcFOuKUgUU971LxDnTMUyrVIDeyashk795ryd0bxB+jXv/OR835UmuieyAuv R/uoz36eBCiL6PPTgcg9Rptz22xwV5oYBqbo4pQFCbqUxCySGudAFAzhLXN9/Hu+rc4pNwvC d34UAgG/rCnVKqLvHgbI7oKhzADBs/BMRhGrfG9zPjM14ve64XS9ELQlf2q5q5EpxoVcW+K3 rgq04nEC3UXNC+BY+K31szBHPWgIVF8Z6/NaqYM2vy8Ylw34ZxORXjVutnlKkvatD+louSIc JP/awMIU7sAIYiL8c1t42PFeE0G6qQak4nr/jn/CXTxdkeLy2YcPSZU96pLlqfcv7iuICEfB yhpYVSKcrctyRo3nfZKOsW2eTvrmPbILNNHpuVQLqECsziC/tRjLNFnMBPHj0VklMPdCT7/d kn0RM5BrstzlsaKZN5AoyevD1sOayHYyfaDhNbqYHs7BTQRciN3fARAArdE/C1RPrvHRb4eQ hiT/g2WBtTfx7xsZhWS8g/tbcquGabe44asCrKaVXyh3TSLZkQnaHLLPDnOIUmqBEb+uwvQ6 NPdb8k8FjJdM0wS8WHAlwMdrVIYyPn1GuoGedCXLfSWMzLNSIgcUzWGNX5DCZFJ7iTQFedSK FJXgOyC8DrrDNkU+fvKKcGyE9kEzrMaBIVP+RCPt7XJk7E6WSDm0ZoUB2gFz11Skhu2I1jA4 E9m8WW5q0CfRgWGrhX9qafv+kAQ0kmqqs3bhzwFSoKJlvWrxAqZnpHqTasqI3QUVP33CO52/ U4WH3+aYihDtnMP4jgJBeW7lBGHJAj5z4SOVyA1CQ7qGl3HZFiASVycq4y0i1AfY29wRin2y EF6gQTrzJj1LQa6ueuRApJFe+wHma3cvWXH1guZeATlUJgW2z1vOiuk1dS2Y03VVmtfAS/y/ v82XnkKt7s4WYx5nfMnfoatbSw1P/I6VdXRsQ3aH079hSFI8fPZCHRgk+GiY/zK+YCpZPBho VS1rl5LKibf8izWC3ngiI2XFxFOxhR46GdEDJ8emPMObkb5IBXhpPj74G37lbfb6CuCvURai xEXabt4n8K0bwV856K/nG2Ad03+jfGAbJxQZhUk5cO4QABuKDI1JY+QqcKZdfnW4vwZs2dIq S9vQHGfYztqiBU+1rRcAEQEAAcLBdgQYAQoAIBYhBGGkxlG22ojewG4Wdg9xTp9qNpciBQJc iN3fAhsMAAoJEA9xTp9qNpci3woQAIO65j77e0dgsYl9GLbPBgpQIuM6P+Zk5GRwPESMIXLC cZfEAMzUPdOh0C8oQ097G6SAYEWZ8B/zuFY+g0AWggprLtZKZqWw2x/fjZsOh0g8ZnTNx9H5 nexbvm9oaZ+QFIWWfSG10Vo1NvnA97ryyRClJB2Km98T817n1wj6BPwexQLeyt6P7/zJpeUN 4R0xFBLJWayHelPojYI63OCll+C6pTaEgMbx5PRdwS6hDrZw4vlCjFSccn9C3AcZ49uJcFoH n5E1PluuIdgnxWhQpmkIOSPfD2UuIsDmLQCitiAVg8XD/o7kx+837Vg2xkm/BisMIvOo2UAm r5TvDyqYAXn5k8Jk4g0GkJduWe0K6F8BSGjIodkh6i3LTmeVxoo7KqfOIeFBbUFBR34Y8wMp xMkR+lsk+CdP2/sWshabanAw/qFaFy6WnmPMb4mKS1IAAPLfk3H5gSECbiHQERSXK8nHyYeh MIaG5vt+D4KNW4TS7cukv+kM3TrTTQFUzdjLmbUpN9DhkfUw4u0hu2genGQ7ExnR2I14LsvD PBXl0kKmlAce8jPJBeoSxGn++NM8BfP2BRPNt/ZZ3G/s2ikVHVsnuPqASthFvJ3ZRr11apHt mEhEYGMbZ8LcZINN7Llpt+L/HoClakocqpL1C4JRe7A7XhBj072mS64HyqaIunR9
- Content-language: fr-FR
- In-reply-to: <29b26834-ee3e-d7bc-557c-92d6a1aad11a@stroeder.com>
- Openpgp: preference=signencrypt
- Organization: Worteks
- References: <4612_1556619632_5CC82170_4612_466_15_76348d36-369b-4f7c-9167-3d1374fff5ba@OPEXCNORM62.corporate.adroot.infra.ftgroup> <29b26834-ee3e-d7bc-557c-92d6a1aad11a@stroeder.com>
- User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0 Thunderbird/60.6.1
Le 30/04/2019 à 21:02, Michael Ströder a écrit :
> On 4/30/19 12:20 PM, pascal.foulon@orange.com wrote:
>> => extented flags
>>
>> https://ldapwiki.com/wiki/Extended%20Flags
> Most of these attribute type description extensions are not relevant for
> OpenLDAP at all.
>
>> I've tried several configurations such as :
>> - define xuid attribute using uid as a parent attribute type
>>
>> olcAttributeTypes: {76}( ORANGE-AT:77 NAME 'xuid' SUP uid EQUALITY
>> caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
>> 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE )
> You should *not* use SUP uid unless you're 100% sure about its
> implications regarding matching rules also affecting index use and
> slapo-unique.
>
>> - define xuid attribute using uid as a parent attribute type with
>> additional extended flags
>>
>> olcAttributeTypes: {76}( ORANGE-AT:77 NAME 'xuid' SUP uid EQUALITY
>> caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
>> 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE X-NDS_NAME 'uniqueID'
>> X-NDS_LOWER_BOUND '1' X-NDS_UPPER_BOUND '64' X-NDS_PUBLIC_READ '0'
>> X-NDS_NONREMOVABLE '0' )
> Everything starting with X-NDS only applies to Novell eDirectory (or
> whatever it's called today) and thus is useless.
>
> For the rest see (as Quanah suggested):
> https://www.openldap.org/software/man.cgi?query=slapo-unique
Hello,
as said by others, you indeed need to configure the unique overlay. You
can also have a look to constraint overlay to add other checks, like
regexp or size.
https://www.openldap.org/software/man.cgi?query=slapo-constraint
--
Clément Oudot | Identity Solutions Manager
clement.oudot@worteks.com
Worteks | https://www.worteks.com