---

   slapo-rwm    ( 5 )

---

SUFFIX MASSAGING

A basic feature of the rwm overlay is the capability to perform
       suffix massaging between a virtual and a real naming context by
       means of the rwm-suffixmassage directive.  This, in conjunction
       with proxy backends, slapd-ldap(5) and slapd-meta(5), or with the
       relay backend, slapd-relay(5), allows one to create virtual views
       of databases.  A distinguishing feature of this overlay is that,
       when instantiated before any database, it can modify the DN of
       requests before database selection.  For this reason, rules that
       rewrite the empty DN ("") or the subschemaSubentry DN (usually
       "cn=subschema"), would prevent clients from reading the root DSE
       or the DSA's schema.

       rwm-suffixmassage [<virtual naming context>] <real naming
       context>
              Shortcut to implement naming context rewriting; the
              trailing part of the DN is rewritten from the virtual to
              the real naming context in the bindDN, searchDN,
              searchFilterAttrDN, compareDN, compareAttrDN, addDN,
              addAttrDN, modifyDN, modifyAttrDN, modrDN, newSuperiorDN,
              deleteDN, exopPasswdDN, and from the real to the virtual
              naming context in the searchEntryDN, searchAttrDN and
              matchedDN rewrite contexts.  By default no rewriting
              occurs for the searchFilter and for the referralAttrDN and
              referralDN rewrite contexts.  If no <virtual naming
              context> is given, the first suffix of the database is
              used; this requires the rwm-suffixmassage directive be
              defined after the database suffix directive.  The
              rwm-suffixmassage directive automatically sets the
              rwm-rewriteEngine to ON.

       See the REWRITING section for details.