Hi,

The OpenLDAP 2.4 documentation states:

“When using slapd.conf(5), overlays that are configured before any other databases are considered global, as mentioned above. In fact they are implicitly stacked on top of the frontend database. They can also be explicitly configured as such:

database frontend

overlay <overlay name>”

I currently use slapo-rwm, defined as a global declaration in slapd.conf, to provide bindDN rewrites to a remote LDAP server via slapo-ldap (LDAP proxy database). Is it possible then, if I’m interpreting the documentation correctly, to additionally stack a rewrite/remap overly in each defined database section? The objective would be to achieve database specific rewrites that are not applicable to all defined databases.

e.g.

database ldap

suffix "dc=abc,dc=local"

uri "ldap://172.11.250.200/"

overlay rwm

rwm-rewriteEngine on

rwm-rewriteContext searchEntryDN

rwm-rewriteRule "^cn=(.+)?\\\\2C(.+)?,ou=users,dc=abc,dc=local$" "cn=$1_$2,ou=users,dc=abc,dc=local" ":@"

[…etc.]

database ldap

suffix "dc=xyz,dc=local"

uri "ldap://172.11.250.201/"

overlay rwm

rwm-rewriteEngine on

rwm-rewriteContext searchEntryDN

rwm-rewriteRule <some other rewrite rule here>

[…etc.]

If this is possible, does the configuration allow one to define the overlay at the “backend” level, so that it applies to all databases of the same type?

e.g.

backend ldap

overlay rwm

rwm-rewriteEngine on

database ldap

suffix "dc=abc,dc=local"

uri "ldap://172.11.250.200/"

rwm-rewriteContext searchEntryDN

rwm-rewriteRule "^cn=(.+)?\\\\2C(.+)?,ou=users,dc=abc,dc=local$" "cn=$1_$2,ou=users,dc=abc,dc=local" ":@"

[…etc.]

database ldap

suffix "dc=xyz,dc=local"

uri "ldap://172.11.250.201/"

rwm-rewriteContext searchEntryDN

rwm-rewriteRule <some other rewrite rule here>

[…etc.]

Thanks

Bryce Powell