Editing OpenLDAP (section)

===Available overlays===
Currently there are 25 overlays in the core OpenLDAP distribution, with another 24 overlays in the user-contributed code section, and more awaiting approval for inclusion.<ref name="overlays">{{cite web|url=https://www.openldap.org/software/man.cgi?query=slapd.overlays&apropos=0&sektion=0&manpath=OpenLDAP+2.6-Release&arch=default&format=html |title=OpenLDAP overlays man page |access-date=25 October 2021}}</ref>

{{Col-begin|width=100%}}
{{Col-break|width=50%}}
* The core overlays include:
** accesslog: log server activity in another LDAP database, for LDAP-accessible logging<ref name="overlays"/>
** auditlog: log server activity in a flat text file<ref name="overlays"/>
** autoca: Automatic Certificate Authority (OpenLDAP 2.5)<ref name="overlays"/>
** chain: intercept referrals and chain them instead; code is part of back-ldap<ref name="overlays"/>
** collect: implement X.500-style collective attributes (aka Netscape Class Of Service)<ref name="overlays"/>
** constraint: restrict the acceptable values for particular attributes<ref name="overlays"/>
** dds: dynamic data service – short-lived, self-expiring entries<ref name="overlays"/>
** deref: return information about entries referenced in a given search result<ref name="overlays"/>
** dyngroup: simple dynamic group support<ref name="overlays"/>
** dynlist: more sophisticated dynamic group support plus more<ref name="overlays"/>
** homedir: Remote home directory provisioning (OpenLDAP 2.5)<ref name="overlays"/>
** memberof: support for memberOf and similar backlink attributes<ref name="overlays"/>
** otp: allows OATH One-Time Passwords to be used in conjunction with the LDAP user password (OpenLDAP 2.5)<ref name="overlays"/>
** pcache: cache search results, mainly to improve performance for proxied servers<ref name="overlays"/>
** ppolicy: LDAP Password Policy – password quality, expiration, etc.<ref name="overlays"/>
** refint: referential integrity<ref name="overlays"/>
** remoteauth: Allows delegation of authentication requests to remote directories. Works with Active Directory. (OpenLDAP 2.5)<ref name="overlays"/>
** retcode: set predetermined return codes for various operations; used for client debugging<ref name="overlays"/>
** rwm: rewrite module, for various alterations of LDAP data<ref name="overlays"/>
** seqmod: serialize writes to individual entries<ref name="overlays"/>
** sssvlv: Server Side Sorting and Virtual List Views<ref name="overlays"/>
** syncprov: Syncrepl Provider, implements the master side of a replication agreement<ref name="overlays"/>
** translucent: Semi-transparent pass-through, for locally augmenting data on a proxied server<ref name="overlays"/>
** unique: for enforcing uniqueness of attribute values within a tree<ref name="overlays"/>
** valsort: maintain various sort orders for values of an attribute<ref name="overlays"/>
{{Col-break|width=50%}}
* The contrib overlays include:
** addpartial: receive Add requests and turn them into Modifies if the target entry already exists<ref name="contrib">{{cite web|url=https://git.openldap.org/openldap/openldap/-/tree/master/contrib/slapd-modules |title=OpenLDAP contrib modules source code |access-date=25 October 2021}}</ref>
** adremap: remaps attributes for PAM/NSS MS AD support (OpenLDAP 2.5)<ref name="contrib"/>
** allop: returns all operational attributes, for clients that don't know how to request them<ref name="contrib"/>
** authzid: implements RFC 3829 support (OpenLDAP 2.5)<ref name="contrib"/>
** autogroup: dynamically managed static groups<ref name="contrib"/>
** cloak: hide attributes unless explicitly requested in a search<ref name="contrib"/>
** datamorph: stores enumerated values and fixed size integers (OpenLDAP 2.5)<ref name="contrib"/>
** denyop: reject arbitrarily configured requests<ref name="contrib"/>
** dupent: return multivalued results as separate entries<ref name="contrib"/>
** lastbind: record the timestamp of a user's last successful authentication<ref name="contrib"/>
** lastmod: maintain the timestamp of the last change within a tree<ref name="contrib"/>
** nops: filter out redundant modifies<ref name="contrib"/>
** noopsrch: count entries that would be returned by a search<ref name="contrib"/>
** nssov: Answer NSS and PAM requests directly in slapd, replaces nss-ldap and pam-ldap.<ref name="contrib"/>
** ppm: adds additional password checking criteria to the slapo-ppolicy overlay (OpenLDAP 2.5)<ref name="contrib"/>
** proxyOld: support an obsolete encoding of ProxyAuthz used by Sun et al.<ref name="contrib"/>
** pw-radius: allows bind operations to be passed to the specified radius server(s) (OpenLDAP 2.5)<ref name="contrib"/>
** rbac: intercepts, decodes and enforces specific RBAC policies per the Apache Fortress RBAC data formats (OpenLDAP 2.5)<ref name="contrib"/>
** smbk5pwd: Maintain Samba and Kerberos passwords<ref name="contrib"/>
** trace: Log every LDAP request and response<ref name="contrib"/>
** totp: provides one time password support (OpenLDAP 2.5)<ref name="contrib"/>
** usn: Update Sequence Numbers (OpenLDAP 2.5)<ref name="contrib"/>
** variant: allows attributes/values to be shared between several entries (OpenLDAP 2.5)<ref name="contrib"/>
** vc: provides the verify credentials extended operation (OpenLDAP 2.5)<ref name="contrib"/>
{{Col-end}}