HP-UX Directory Server Administrator Guide HP-UX Directory Server Version 8.1 (5900-3098, May 2013)

The markerObjectClass or requiredObjectClass keywords cannot be repeated by
incrementing the counter in the nsslapd-pluginarg attribute suffix. These keywords can only
be used once per Attribute Uniqueness Plug-in instance.
NOTE:
The nsslapd-pluginarg0 attribute always contains the name of the attribute for which to ensure
uniqueness.
3.7.5 Attribute uniqueness plug-in syntax examples
This section contains examples of Attribute Uniqueness Plug-in syntax in the dse.ldif file.
• “Specifying one attribute and one subtree” (page 143)
• “Specifying one attribute and multiple subtrees” (page 143)
3.7.5.1 Specifying one attribute and one subtree
This example configures the plug-in to ensure the uniqueness of the mail attribute under the
dc=example,dc=com subtree.
dn: cn=mail uniqueness,cn=plugins,cn=config
...
nsslapd-pluginEnabled: on
nsslapd-pluginarg0: mail
nsslapd-pluginarg1: dc=example,dc=com
...
3.7.5.2 Specifying one attribute and multiple subtrees
It is possible to use a single plug-in instance to check for the uniqueness of an attribute within
multiple subtrees, which means that the attribute value must be unique within each subtree but not
unique across all subtrees. This example configures the Attribute Uniqueness Plug-in to ensure the
uniqueness of the mail attribute for separate subtrees, l=Chicago,dc=example,dc=com and
l=Boston,dc=example,dc=com.
dn: cn=mail uniqueness,cn=plugins,cn=config
...
nsslapd-pluginEnabled: on
nsslapd-pluginarg0: mail
nsslapd-pluginarg1: l=Chicago,dc=example,dc=com
nsslapd-pluginarg2: l=Boston,dc=example,dc=com
...
NOTE:
The nsslapd-pluginarg0 attribute always contains the name of the attribute for which to ensure
uniqueness. All other occurrences of the nsslapd-pluginarg, such as nsslapd-pluginarg1,
contain DNs.
With this configuration, the plug-in allows an instance of a value for the mail attribute to exist
once under the l=Chicago,dc=example,dc=com subtree and once under the
l=Boston,dc=example,dc=com subtree. For example, the following two attribute-value settings
are allowed:
mail=bjensen,l=Chicago,dc=example,dc=com
mail=bjensen,l=Boston,dc=example,dc=com
To ensure that only one instance of a value exists under both subtrees, configure the plug-in to
ensure uniqueness for the entire dc=example,dc=com subtree.
3.7 Enforcing Attribute Uniqueness 143