13.2. Enabling the DIOP Feature in Directory Server

For a Directory Server instance to support the DIOP feature, its default configuration needs to be modified - the server needs to be configured to use the null DN or the root suffix in the server. This can be done by adding the following entry to the dse.ldif file of the server instance in which you want to enable the DIOP feature: 
dn: cn=,cn=mapping tree,cn=config objectClass: top objectClass: extensibleObject objectClass: nsMappingTree cn: nsslapd-state: container
You can modify the dse.ldif in either of the following ways:
  1. By editing the dse.ldif file directly:
    1. Shut down your Directory Server. 
      # systemctl stop dirsrv.target
    2. In the text editor, open the dse.ldif file.
      The file is located in the /etc/dirsrv/slapd-instance directory.
    3. Add the above-mentioned entry, save your changes, and close the file.
    4. Restart the server. 
      # systemctl start dirsrv.target
  2. By using the ldapmmodify command.
    1. You can also add the above entry by running the ldapmodify command on the slapd-<diopInstance> server with the LDIF input file containing the above entry. For example, your command might look like this: 
      # ldapmodify -h <host> -p <port> -W -D cn=Directory Manager -vcaf <ldif_file_containing_the_entry>
      Once you add the above entry to the server configuration, the DIOP functionality is enabled in the server.

Note

An example plug-in is shipped with the server to show how a DIOP pre-operation plug-in can be used to work with the DIOP-enabled server. For details about the sample plug-in, see Section 13.4, “Sample DIOP Plug-in”. To use the sample plug-in or your own custom plug-in in the server, see Section 13.3, “Using the DIOP Feature”.