SLAPO-DEREF(5) File Formats Manual SLAPO-DEREF(5)

slapo-deref - Dereference Control overlay to slapd



This overlay implements the draft Dereference control. The overlay can be used with any backend or globally for all backends.

database mdb
overlay deref

Given these entries:

dn: cn=Howard Chu,ou=people,dc=example,dc=org
objectClass: inetOrgPerson
cn: Howard Chu
sn: Chu
uid: hyc
dn: cn=Pierangelo Masarati,ou=people,dc=example,dc=org
objectClass: inetOrgPerson
cn: Pierangelo Masarati
sn: Masarati
uid: ando
dn: cn=Test Group,ou=groups,dc=example,dc=org
objectClass: groupOfNames
cn: Test Group
member: cn=Howard Chu,ou=people,dc=example,dc=org
member: cn=Pierangelo Masarati,ou=people,dc=example,dc=org

A search could be performed with a Dereference request control value specified as

{ member, uid }


ldapsearch -x -b dc=example,dc=org -E 'deref=member:uid'

and the "cn=Test Group" entry would be returned with the response control value

{ { member, cn=Howard Chu,ou=people,dc=example,dc=org,
{ { uid, [hyc] } } },
{ member, cn=Pierangelo Masarati,ou=people,dc=example,dc=org,
{ { uid, [ando] } } } }

default slapd configuration file
default slapd configuration directory

slapd.conf(5), slapd-config(5).

"OpenLDAP Administrator's Guide" (

IETF LDAP Dereference Control proposal by P. Masarati, H. Chu, in IETF document "draft-masarati-ldap-deref-00.txt".

Pierangelo Masarati

2023/07/31 OpenLDAP 2.6.6