Document how to use unique overlay for uid and keyFingerPrint

diff --git a/debian/changelog b/debian/changelog
index 55f5952..a387633 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,10 +1,14 @@
 userdir-ldap (0.3.XX) Xnstable; urgency=low
 
+  [ Peter Palfrader ]
   * ud-replicate: sgran pointed out that if all we care about ignoring is
     EEXIST then we should use mkdir -p instead of [ -d userkeys ] || mkdir
     userkeys.
 
- -- Peter Palfrader <weasel@debian.org>  Sun, 18 May 2008 13:40:04 +0200
+  [ Stephen Gran ]
+  * Document how to use unique overlay for uid and keyFingerPrint
+
+ -- Stephen Gran <sgran@debian.org>  Sun, 18 May 2008 17:58:46 +0100
 
 userdir-ldap (0.3.25+common1) unstable; urgency=low
 

diff --git a/doc/slapd-config.txt b/doc/slapd-config.txt
index 1804081..122455d 100644 (file)
--- a/doc/slapd-config.txt
+++ b/doc/slapd-config.txt
@@ -42,6 +42,13 @@ access to *
         by dn="uid=admin,ou=users,dc=debian,dc=org" write
         by group="uid=admin,ou=users,dc=debian,dc=org" write
 
+# Overlays are useful to enforce constraints:
+
+moduleload /usr/lib/ldap/unique.so
+overlay unique
+unique_base ou=users,dc=debian,dc=org
+unique_attributes uid keyFingerPrint
+
 # End----------
 
 Note that in more modern versions of slapd, the "by addr" and "by domain"