5.5. Displaying and Modifying the Attribute List
By default, the Referential Integrity plug-in is set up to check for and update the
member
, uniquemember
, owner
, and seeAlso
attributes. You can add or delete attributes to be updated using the command line or the web console.
Note
Attributes set in the Referential Integrity plug-in's parameter list, must have equality indexing on all databases. Otherwise, the plug-in scans every entry of the database for matching the deleted or modified DN. This can have a significant performance impact. For details about checking and creating indexes, see Section 13.2, “Creating Standard Indexes”.
5.5.1. Displaying the Attribute List Using the Command Line
To display the attribute list using the command line:
# dsconf -D "cn=Directory Manager" ldap://server.example.com plugin referential-integrity show
5.5.2. Displaying the Attribute List Using the Web Console
To display the attribute list using the web console:
- Open the Directory Server user interface in the web console. See Section 1.4, “Logging Into Directory Server Using the Web Console”.
- Select the instance.
- Open the Plugins menu.
- Select the Referential Integrity plug-in.
- See the Membership Attribute field for the list of attributes.
5.5.3. Configuring the Attribute List Using the Command Line
To update the attribute list using the command line:
- Optionally, display the current list of attributes. See Section 5.5.1, “Displaying the Attribute List Using the Command Line”.
- Update the attribute list:
- To set an attribute list that should be checked and updated by the plug-in:
# dsconf -D "cn=Directory Manager" ldap://server.example.com plugin referential-integrity set --membership-attr attribute_name_1 attribute_name_2
- To delete all attributes that should no longer be checked and updated by the plug-in:
# dsconf -D "cn=Directory Manager" ldap://server.example.com plugin referential-integrity set --membership-attr delete
- Restart the instance:
# dsctl instance_name restart
5.5.4. Configuring the Attribute List Using the Web Console
To update the attribute list using the web console:
- Open the Directory Server user interface in the web console. See Section 1.4, “Logging Into Directory Server Using the Web Console”.
- Select the instance.
- Open the Plugins menu.
- Select the Referential Integrity plug-in.
- Update the Membership Attribute field to set the attributes.
- To add an attribute, enter the name into the Membership Attribute field.
- To remove an attribute, press the X button right next to the attribute's name in the Membership Attribute field.
- Press Save Config.