Overview#

Referential integrity is a mechanism for ensuring that any references to an entry are updated whenever that entry is removed or altered. Historically, referential integrity is primarily used to ensure that attributes with a DN syntax (especially group membership attributes like member and uniqueMember) are properly maintained in the event of delete and modify DN operations. For a delete operation, any references to the target entry will be removed. For modify DN operations, any references to the target entry will be renamed accordingly.

OpenDS#

OpenDS does not currently provide a referential integrity mechanism.

EDirectory#

EDirectory does currently provide a referential integrity mechanism for DN attributes.

More Information#

There might be more information for this subject on one of the following:

• Best Practices for LDAP Security
• Forward Reference
• Glossary Of LDAP And Directory Terminology
• Object ACL
• ObjectClass=unknown