Server plug-in functionality reference, 7-bit check plug-in, Acl plug-in – Red Hat 8.1 User Manual
Page 106: 7-bit check plug-in 3.1.2. acl plug-in
Chapter 3. Plug-in Implemented Server Functionality Reference
This chapter contains reference information on Red Hat Directory Server plug-ins.
The configuration for each part of Directory Server plug-in functionality has its own separate entry and
set of attributes under the subtree cn=plugins, cn=config.
dn: cn=Telephone Syntax, cn=plugins, cn=config
objectclass: top
objectclass: nsSlapdPlugin
objectclass: extensibleObject
cn: Telephone Syntax
nsslapd-pluginPath: libsyntax-plugin
nsslapd-pluginInitfunc: tel_init
nsslapd-pluginType: syntax
nsslapd-pluginEnabled: on
Some of these attributes are common to all plug-ins while others may be particular to a specific plug-in.
Check which attributes are currently being used by a given plug-in by performing an ldapsearch on
the cn=config subtree.
All plug-ins are instances of the nsSlapdPlugin object class, which in turn inherits from the
extensibleObject object class. For plug-in configuration attributes to be taken into account by the
server, both of these object classes (in addition to the top object class) must be present in the entry, as
shown in the following example:
dn:cn=ACL Plugin, cn=plugins, cn=config
objectclass:top
objectclass:nsSlapdPlugin
objectclass:extensibleObject
3.1. Server Plug-in Functionality Reference
The following tables provide a quick overview of the plug-ins provided with Directory Server, along with
their configurable options, configurable arguments, default setting, dependencies, general performance-
related information, and further reading. These tables assist in weighing plug-in performance gains and
costs and choose the optimal settings for the deployment. The Further Information section cross-
references further reading, where this is available.
3.1.1. 7-bit Check Plug-in
Plug-in Parameter
Description
Plug-in Name
7-bit check (NS7bitAtt)
DN of Configuration Entry
cn=7-bit check, cn=plugins, cn=config
Description
Checks certain attributes are 7-bit clean
Configurable Options
on | off
Default Setting
on
Configurable Arguments
List of attributes (uid mail userPassword)
followed by "," and then suffixes on which the
check is to occur.
Dependencies
None
Performance Related Information
None
Further Information
If the Directory Server uses non-ASCII characters,
such as Japanese, turn this plug-in off.
3.1.2. ACL Plug-in
Plug-in Parameter
Description
Plug-in Name
ACL Plug-in
DN of Configuration Entry
cn=ACL Plugin, cn=plugins, cn=config
Description
ACL access check plug-in
Configurable Options
on | off
Default Setting
on
Configurable Arguments
None
Dependencies
None
Performance Related Information
Access control incurs a minimal performance hit.
Leave this plug-in enabled since it is the primary
means of access control for the server.
Further Information
See the "Managing Access Control" chapter in
the Directory Server Administrator's Guide.
106
Chapter 3. Plug-in Implemented Server Functionality Reference