merge from alioth: Document how to use unique overlay for uid and keyFingerPrint

diff --git a/debian/changelog b/debian/changelog
index e3b3813..3dd2894 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -8,6 +8,9 @@ userdir-ldap (0.3.XX) Xnstable; urgency=low
   * Use ud-config to get the emailappend value in ud-replicate, no longer
   hardcoding @debian.org
 
+  [ Stephen Gran ]
+  * Document how to use unique overlay for uid and keyFingerPrint
+
  -- Peter Palfrader <weasel@debian.org>  Fri, 23 May 2008 10:01:51 +0200
 
 userdir-ldap (0.3.30) unstable; urgency=low

diff --git a/doc/slapd-config.txt b/doc/slapd-config.txt
index 1804081..5e39099 100644 (file)
--- a/doc/slapd-config.txt
+++ b/doc/slapd-config.txt
@@ -42,6 +42,13 @@ access to *
         by dn="uid=admin,ou=users,dc=debian,dc=org" write
         by group="uid=admin,ou=users,dc=debian,dc=org" write
 
+# Overlays are useful to enforce constraints:
+
+moduleload /usr/lib/ldap/unique.so
+overlay unique
+unique_uri ldap:///ou=users,dc=debian,dc=org?uidNumber,uid,keyFingerPrint?sub
+unique_uri ldap:///ou=groups,dc=debian,dc=org?gidNumber,cn?sub
+
 # End----------
 
 Note that in more modern versions of slapd, the "by addr" and "by domain"