nsd_openldap(7)

     NAME
          nsd_openldap - OpenLDAP client for NSD

     SYNOPSIS
          /var/ns/lib/libns_openldap.so

     DESCRIPTION
          Lightweight Directory Access Protocol (LDAP) is a
          specification for a client-server protocol to retrieve and
          manage directory information.  Originally intended as a
          means for clients on lightweight workstations to access
          X.500 directories, it can be used with any directory system
          which follows the X.500 data model.  The libns_ldap.so
          shared library contains routines that use OpenLDAP to
          contact a remote LDAP server daemon, fetch information, and
          format it so that it is available to local name service
          routines.  This library is meant to be used with the nsd(1M)
          name service daemon only.

          The library /var/ns/lib/libns_openldap.so is opened by the
          nsd(1M) daemon when openldap is listed as the protocol for
          some map in a nsswitch.conf file.  On first open the library
          initialization procedure parses the configuration file
          /var/ns/nsd_openldap.conf to determine the list of servers
          to contact, and the schemas for each table in the database.
          It will then open OpenLDAP configuration files as specified
          in /var/ns/nsd_openldap.conf.

          The library contains code to fetch data from a remote LDAP
          server and present it as lines from the configuration file
          from which it came.  The nsd daemon then presents that data
          in the filesystem mounted under /ns.

          This library differs with the ldap(7) nsd library in that it
          uses OpenLDAP to connect with the LDAP server, and it has a
          new syntax for its configuration file.  OpenLDAP specific
          features may be enabled in the OpenLDAP configuration file
          specified for a particular server.

          Extended attributes in the nsswitch.conf file can be used to
          control the behavior of the LDAP protocol.  Extended
          attributes are simply lists of key/value pairs attached to
          each object in the nsd filesystem.  The attributes supported
          in this library are:

          server The server is used to determine which remote LDAP
          server to contact for a request.

          domain The domain is used to determine which remote LDAP
          server to contact for a request.  This is similar to the
          server attribute, however, the domain can be inherited from
          the daemon depending on the nsswitch.conf file that is being
          read.

          table The table attribute is typically inherited from the
          daemon based on the line from which this entry occurs in the
          nsswitch.conf file.  In the above example the table
          attribute would be set to hosts.byname or hosts.byaddr
          depending on the context of the request.  The table
          attribute determines which database schema and format are
          used.  See the nsd_openldap.conf(4) man page for more
          information on schemas.

          key The key is set by the nsd daemon for each request.  The
          schema for the current table typically contains a rewriting
          rule for the key to make an appropriate request to the
          remote LDAP daemon.

     FILES
          /var/ns/nsd_openldap.conf

     SEE ALSO
          nsd(1m), ldap(3), nsd_openldap.conf(4), nsswitch.conf(4),
          ldap.conf(5).