Red Hat Summit Red Hat SummitSupportConsoleDevelopersStart a trialContact

5.5. Displaying and Modifying the Attribute List

By default, the Referential Integrity plug-in is set up to check for and update the member, uniquemember, owner, and seeAlso attributes. You can add or delete attributes to be updated using the command line or the web console.

Note

Attributes set in the Referential Integrity plug-in's parameter list, must have equality indexing on all databases. Otherwise, the plug-in scans every entry of the database for matching the deleted or modified DN. This can have a significant performance impact. For details about checking and creating indexes, see Section 13.2, “Creating Standard Indexes”.
To display the attribute list using the command line: 
# dsconf -D "cn=Directory Manager" ldap://server.example.com plugin referential-integrity show
Copy to Clipboard Toggle word wrap
To display the attribute list using the web console:
  1. Open the Directory Server user interface in the web console. See Section 1.4, “Logging Into Directory Server Using the Web Console”.
  2. Select the instance.
  3. Open the Plugins menu.
  4. Select the Referential Integrity plug-in.
  5. See the Membership Attribute field for the list of attributes.
To update the attribute list using the command line:
  1. Optionally, display the current list of attributes. See Section 5.5.1, “Displaying the Attribute List Using the Command Line”.
  2. Update the attribute list:
    • To set an attribute list that should be checked and updated by the plug-in: 
      # dsconf -D "cn=Directory Manager" ldap://server.example.com plugin referential-integrity set --membership-attr attribute_name_1 attribute_name_2
      Copy to Clipboard Toggle word wrap
    • To delete all attributes that should no longer be checked and updated by the plug-in: 
      # dsconf -D "cn=Directory Manager" ldap://server.example.com plugin referential-integrity set --membership-attr delete
      Copy to Clipboard Toggle word wrap
  3. Restart the instance: 
    # dsctl instance_name restart
    Copy to Clipboard Toggle word wrap
To update the attribute list using the web console:
  1. Open the Directory Server user interface in the web console. See Section 1.4, “Logging Into Directory Server Using the Web Console”.
  2. Select the instance.
  3. Open the Plugins menu.
  4. Select the Referential Integrity plug-in.
  5. Update the Membership Attribute field to set the attributes.
    • To add an attribute, enter the name into the Membership Attribute field.
    • To remove an attribute, press the X button right next to the attribute's name in the Membership Attribute field.
  6. Press Save Config.
Back to top
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2025 Red Hat