перезаписать / переназначить оверлей на slapd (rewrite/remap overlay to slapd)
SUFFIX MASSAGING
A basic feature of the rwm overlay is the capability to perform
suffix massaging between a virtual and a real naming context by
means of the rwm-suffixmassage directive. This, in conjunction
with proxy backends, slapd-ldap(5) and slapd-meta(5), or with the
relay backend, slapd-relay(5), allows one to create virtual views
of databases. A distinguishing feature of this overlay is that,
when instantiated before any database, it can modify the DN of
requests before database selection. For this reason, rules that
rewrite the empty DN ("") or the subschemaSubentry DN (usually
"cn=subschema"), would prevent clients from reading the root DSE
or the DSA's schema.
rwm-suffixmassage [<virtual naming context>] <real naming
context>
Shortcut to implement naming context rewriting; the
trailing part of the DN is rewritten from the virtual to
the real naming context in the bindDN, searchDN,
searchFilterAttrDN, compareDN, compareAttrDN, addDN,
addAttrDN, modifyDN, modifyAttrDN, modrDN, newSuperiorDN,
deleteDN, exopPasswdDN, and from the real to the virtual
naming context in the searchEntryDN, searchAttrDN and
matchedDN rewrite contexts. By default no rewriting
occurs for the searchFilter and for the referralAttrDN and
referralDN rewrite contexts. If no <virtual naming
context> is given, the first suffix of the database is
used; this requires the rwm-suffixmassage directive be
defined after the database suffix directive. The
rwm-suffixmassage directive automatically sets the
rwm-rewriteEngine to ON.
See the REWRITING section for details.
