Red Hat 8 1 Users Manual Configuration And Command Reference  

2015-02-06

• Configuration and Command Reference
• Table of Contents
• About This Reference
  • 1. Directory Server Overview
  • 2. Examples and Formatting
    • 2.1. Command and File Examples
    • 2.2. Tool Locations
    • 2.3. LDAP Locations
    • 2.4. Text Formatting and Styles
  • 3. Additional Reading
  • 4. Giving Feedback
  • 5. Documentation History
• Chapter 1. Introduction
  • 1.1. Directory Server Configuration
  • 1.2. Directory Server Instance File Reference
  • 1.3. Using Directory Server Command-Line Utilities
  • 1.4. Using Directory Server Command-Line Scripts
• Chapter 2. Core Server Configuration Reference
  • 2.1. Overview of the Directory Server Configuration
    • 2.1.1. LDIF and Schema Configuration Files
    • 2.1.2. How the Server Configuration Is Organized
      • 2.1.2.1. Configuration Attributes
      • 2.1.2.2. Configuration of Plug-in Functionality
      • 2.1.2.3. Configuration of Databases
      • 2.1.2.4. Configuration of Indexes
  • 2.2. Accessing and Modifying Server Configuration
    • 2.2.1. Access Control for Configuration Entries
    • 2.2.2. Changing Configuration Attributes
      • 2.2.2.1. Modifying Configuration Entries Using LDAP
      • 2.2.2.2. Restrictions to Modifying Configuration Entries and Attributes
      • 2.2.2.3. Configuration Changes Requiring Server Restart
  • 2.3. Core Server Configuration Attributes Reference
    • 2.3.1. cn=config
      • 2.3.1.1. nsslapd-accesslog (Access Log)
      • 2.3.1.2. nsslapd-accesslog-level (Access Log Level)
      • 2.3.1.3. nsslapd-accesslog-list (List of Access Log Files)
      • 2.3.1.4. nsslapd-accesslog-logbuffering (Log Buffering)
      • 2.3.1.5. nsslapd-accesslog-logexpirationtime (Access Log Expiration Time)
      • 2.3.1.6. nsslapd-accesslog-logexpirationtimeunit (Access Log Expiration Time Unit)
      • 2.3.1.7. nsslapd-accesslog-logging-enabled (Access Log Enable Logging)
      • 2.3.1.8. nsslapd-accesslog-logmaxdiskspace (Access Log Maximum Disk Space)
      • 2.3.1.9. nsslapd-accesslog-logminfreediskspace (Access Log Minimum Free Disk Space)
      • 2.3.1.10. nsslapd-accesslog-logrotationsync-enabled (Access Log Rotation Sync Enabled)
      • 2.3.1.11. nsslapd-accesslog-logrotationsynchour (Access Log Rotation Sync Hour)
      • 2.3.1.12. nsslapd-accesslog-logrotationsyncmin (Access Log Rotation Sync Minute)
      • 2.3.1.13. nsslapd-accesslog-logrotationtime (Access Log Rotation Time)
      • 2.3.1.14. nsslapd-accesslog-logrotationtimeunit (Access Log Rotation Time Unit)
      • 2.3.1.15. nsslapd-accesslog-maxlogsize (Access Log Maximum Log Size)
      • 2.3.1.16. nsslapd-accesslog-maxlogsperdir (Access Log Maximum Number of Log Files)
      • 2.3.1.17. nsslapd-accesslog-mode (Access Log File Permission)
      • 2.3.1.18. nsslapd-allow-unauthenticated-binds
      • 2.3.1.19. nsslapd-attribute-name-exceptions
      • 2.3.1.20. nsslapd-auditlog (Audit Log)
      • 2.3.1.21. nsslapd-auditlog-list
      • 2.3.1.22. nsslapd-auditlog-logexpirationtime (Audit Log Expiration Time)
      • 2.3.1.23. nsslapd-auditlog-logexpirationtimeunit (Audit Log Expiration Time Unit)
      • 2.3.1.24. nsslapd-auditlog-logging-enabled (Audit Log Enable Logging)
      • 2.3.1.25. nsslapd-auditlog-logmaxdiskspace (Audit Log Maximum Disk Space)
      • 2.3.1.26. nsslapd-auditlog-logminfreediskspace (Audit Log Minimum Free Disk Space)
      • 2.3.1.27. nsslapd-auditlog-logrotationsync-enabled (Audit Log Rotation Sync Enabled)
      • 2.3.1.28. nsslapd-auditlog-logrotationsynchour (Audit Log Rotation Sync Hour)
      • 2.3.1.29. nsslapd-auditlog-logrotationsyncmin (Audit Log Rotation Sync Minute)
      • 2.3.1.30. nsslapd-auditlog-logrotationtime (Audit Log Rotation Time)
      • 2.3.1.31. nsslapd-auditlog-logrotationtimeunit (Audit Log Rotation Time Unit)
      • 2.3.1.32. nsslapd-auditlog-maxlogsize (Audit Log Maximum Log Size)
      • 2.3.1.33. nsslapd-auditlog-maxlogsperdir (Audit Log Maximum Number of Log Files)
      • 2.3.1.34. nsslapd-auditlog-mode (Audit Log File Permission)
      • 2.3.1.35. nsslapd-certdir (Certificate and Key Database Directory)
      • 2.3.1.36. nsslapd-certmap-basedn (Certificate Map Search Base)
      • 2.3.1.37. nsslapd-config
      • 2.3.1.38. nsslapd-conntablesize
      • 2.3.1.39. nsslapd-counters
      • 2.3.1.40. nsslapd-csnlogging
      • 2.3.1.41. nsslapd-ds4-compatible-schema
      • 2.3.1.42. nsslapd-enquote-sup-oc (Enable Superior Object Class Enquoting)
      • 2.3.1.43. nsslapd-errorlog (Error Log)
      • 2.3.1.44. nsslapd-errorlog-level (Error Log Level)
      • 2.3.1.45. nsslapd-errorlog-list
      • 2.3.1.46. nsslapd-errorlog-logexpirationtime (Error Log Expiration Time)
      • 2.3.1.47. nsslapd-errorlog-logexpirationtimeunit (Error Log Expiration Time Unit)
      • 2.3.1.48. nsslapd-errorlog-logging-enabled (Enable Error Logging)
      • 2.3.1.49. nsslapd-errorlog-logmaxdiskspace (Error Log Maximum Disk Space)
      • 2.3.1.50. nsslapd-errorlog-logminfreediskspace (Error Log Minimum Free Disk Space)
      • 2.3.1.51. nsslapd-errorlog-logrotationsync-enabled (Error Log Rotation Sync Enabled)
      • 2.3.1.52. nsslapd-errorlog-logrotationsynchour (Error Log Rotation Sync Hour)
      • 2.3.1.53. nsslapd-errorlog-logrotationsyncmin (Error Log Rotation Sync Minute)
      • 2.3.1.54. nsslapd-errorlog-logrotationtime (Error Log Rotation Time)
      • 2.3.1.55. nsslapd-errorlog-logrotationtimeunit (Error Log Rotation Time Unit)
      • 2.3.1.56. nsslapd-errorlog-maxlogsize (Maximum Error Log Size)
      • 2.3.1.57. nsslapd-errorlog-maxlogsperdir (Maximum Number of Error Log Files)
      • 2.3.1.58. nsslapd-errorlog-mode (Error Log File Permission)
      • 2.3.1.59. nsslapd-groupevalnestlevel
      • 2.3.1.60. nsslapd-idletimeout (Default Idle Timeout)
      • 2.3.1.61. nsslapd-instancedir (Instance Directory)
      • 2.3.1.62. nsslapd-ioblocktimeout (IO Block Time Out)
      • 2.3.1.63. nsslapd-lastmod (Track Modification Time)
      • 2.3.1.64. nsslapd-ldapiautobind (Enable Autobind)
      • 2.3.1.65. nsslapd-ldapientrysearchbase (Search Base for LDAPI Authentication Entries)
      • 2.3.1.66. nsslapd-ldapifilepath (File Location for LDAPI Socket)
      • 2.3.1.67. nsslapd-ldapigidnumbertype (Attribute Mapping for System GUID Number)
      • 2.3.1.68. nsslapd-ldapilisten (Enable LDAPI)
      • 2.3.1.69. nsslapd-ldapimaprootdn (Autobind Mapping for Root User)
      • 2.3.1.70. nsslapd-ldapimaptoentries (Enable Autobind Mapping for Regular Users)
      • 2.3.1.71. nsslapd-ldapiuidnumbertype
      • 2.3.1.72. nsslapd-listenhost (Listen to IP Address)
      • 2.3.1.73. nsslapd-localhost (Local Host)
      • 2.3.1.74. nsslapd-localuser (Local User)
      • 2.3.1.75. nsslapd-lockdir (Server Lock File Directory)
      • 2.3.1.76. nsslapd-maxbersize (Maximum Message Size)
      • 2.3.1.77. nsslapd-maxdescriptors (Maximum File Descriptors)
      • 2.3.1.78. nsslapd-maxsasliosize (Maximum SASL Packet Size)
      • 2.3.1.79. nsslapd-maxthreadsperconn (Maximum Threads per Connection)
      • 2.3.1.80. nsslapd-nagle
      • 2.3.1.81. nsslapd-outbound-ldap-io-timeout
      • 2.3.1.82. nsslapd-plug-in
      • 2.3.1.83. nsslapd-port (Port Number)
      • 2.3.1.84. nsslapd-privatenamespaces
      • 2.3.1.85. nsslapd-pwpolicy-local (Enable Subtree- and User-Level Password Policy)
      • 2.3.1.86. nsslapd-readonly (Read Only)
      • 2.3.1.87. nsslapd-referral (Referral)
      • 2.3.1.88. nsslapd-referralmode (Referral Mode)
      • 2.3.1.89. nsslapd-reservedescriptors (Reserved File Descriptors)
      • 2.3.1.90. nsslapd-return-exact-case (Return Exact Case)
      • 2.3.1.91. nsslapd-rewrite-rfc1274
      • 2.3.1.92. nsslapd-rootdn (Manager DN)
      • 2.3.1.93. nsslapd-rootpw (Root Password)
      • 2.3.1.94. nsslapd-rootpwstoragescheme (Root Password Storage Scheme)
      • 2.3.1.95. nsslapd-saslpath
      • 2.3.1.96. nsslapd-schema-ignore-trailing-spaces (Ignore Trailing Spaces in Object Class Names)
      • 2.3.1.97. nsslapd-schemacheck (Schema Checking)
      • 2.3.1.98. nsslapd-schemadir
      • 2.3.1.99. nsslapd-schemareplace
      • 2.3.1.100. nsslapd-securelistenhost
      • 2.3.1.101. nsslapd-securePort (Encrypted Port Number)
      • 2.3.1.102. nsslapd-security (Security)
      • 2.3.1.103. nsslapd-sizelimit (Size Limit)
      • 2.3.1.104. nsslapd-ssl-check-hostname (Verify Hostname for Outbound Connections)
      • 2.3.1.105. nsslapd-threadnumber (Thread Number)
      • 2.3.1.106. nsslapd-timelimit (Time Limit)
      • 2.3.1.107. nsslapd-tmpdir
      • 2.3.1.108. nsslapd-versionstring
      • 2.3.1.109. nsslapd-workingdir
      • 2.3.1.110. nsSSLclientauth (Client Authentication)
      • 2.3.1.111. passwordAllowChangeTime
      • 2.3.1.112. passwordChange (Password Change)
      • 2.3.1.113. passwordCheckSyntax (Check Password Syntax)
      • 2.3.1.114. passwordExp (Password Expiration)
      • 2.3.1.115. passwordExpirationTime
      • 2.3.1.116. passwordExpWarned
      • 2.3.1.117. passwordGraceLimit (Password Expiration)
      • 2.3.1.118. passwordGraceUserTime
      • 2.3.1.119. passwordHistory (Password History)
      • 2.3.1.120. passwordInHistory (Number of Passwords to Remember)
      • 2.3.1.121. passwordIsGlobalPolicy (Password Policy and Replication)
      • 2.3.1.122. passwordKeepHistory
      • 2.3.1.123. passwordLockout (Account Lockout)
      • 2.3.1.124. passwordLockoutDuration (Lockout Duration)
      • 2.3.1.125. passwordMaxAge (Password Maximum Age)
      • 2.3.1.126. passwordMaxFailure (Maximum Password Failures)
      • 2.3.1.127. passwordMaxRepeats (Password Syntax)
      • 2.3.1.128. passwordMin8Bit (Password Syntax)
      • 2.3.1.129. passwordMinAge (Password Minimum Age)
      • 2.3.1.130. passwordMinAlphas (Password Syntax)
      • 2.3.1.131. passwordMinCategories (Password Syntax)
      • 2.3.1.132. PasswordMinDigits (Password Syntax)
      • 2.3.1.133. passwordMinLength (Password Minimum Length)
      • 2.3.1.134. PasswordMinLowers (Password Syntax)
      • 2.3.1.135. PasswordMinSpecials (Password Syntax)
      • 2.3.1.136. PasswordMinTokenLength (Password Syntax)
      • 2.3.1.137. PasswordMinUppers (Password Syntax)
      • 2.3.1.138. passwordMustChange (Password Must Change)
      • 2.3.1.139. passwordResetDuration
      • 2.3.1.140. passwordResetFailureCount (Reset Password Failure Count After)
      • 2.3.1.141. passwordRetryCount
      • 2.3.1.142. passwordStorageScheme (Password Storage Scheme)
      • 2.3.1.143. passwordUnlock (Unlock Account)
      • 2.3.1.144. passwordWarning (Send Warning)
      • 2.3.1.145. retryCountResetTime
    • 2.3.2. cn=changelog5
      • 2.3.2.1. nsslapd-changelogdir
      • 2.3.2.2. nsslapd-changelogmaxage (Max Changelog Age)
      • 2.3.2.3. nsslapd-changelogmaxentries (Max Changelog Records)
      • 2.3.2.4. changes
      • 2.3.2.5. changeLog
      • 2.3.2.6. changeNumber
      • 2.3.2.7. changeTime
      • 2.3.2.8. changeType
      • 2.3.2.9. deleteOldRdn
      • 2.3.2.10. filterInfo
      • 2.3.2.11. newRdn
      • 2.3.2.12. newSuperior
      • 2.3.2.13. targetDn
    • 2.3.3. cn=encryption
      • 2.3.3.1. nsSSLSessionTimeout
      • 2.3.3.2. nsSSLclientauth
      • 2.3.3.3. nsSSL2
      • 2.3.3.4. nsSSL3
      • 2.3.3.5. nsSSL3ciphers
    • 2.3.4. cn=features
      • 2.3.4.1. oid
    • 2.3.5. cn=mapping tree
    • 2.3.6. Suffix Configuration Attributes under cn="suffixName"
      • 2.3.6.1. nsslapd-state
      • 2.3.6.2. nsslapd-backend
    • 2.3.7. Replication Attributes under cn=replica, cn="suffixDN", cn=mapping tree, cn=config
      • 2.3.7.1. nsDS5Flags
      • 2.3.7.2. nsds5DebugReplicaTimeout
      • 2.3.7.3. nsDS5ReplConflict
      • 2.3.7.4. nsDS5ReplicaAutoReferral
      • 2.3.7.5. nsDS5ReplicaBindDN
      • 2.3.7.6. nsDS5ReplicaChangeCount
      • 2.3.7.7. nsDS5ReplicaId
      • 2.3.7.8. nsDS5ReplicaLegacyConsumer
      • 2.3.7.9. nsDS5ReplicaName
      • 2.3.7.10. nsDS5ReplicaPurgeDelay
      • 2.3.7.11. nsDS5ReplicaReferral
      • 2.3.7.12. nsDS5ReplicaRoot
      • 2.3.7.13. nsDS5ReplicaTombstonePurgeInterval
      • 2.3.7.14. nsDS5ReplicaType
      • 2.3.7.15. nsDS5ReplicaReapActive
      • 2.3.7.16. nsds5Task
      • 2.3.7.17. nsState
    • 2.3.8. Replication Attributes under cn=ReplicationAgreementName, cn=replica, cn="suffixName", cn=mapping tree, cn=config
      • 2.3.8.1. cn
      • 2.3.8.2. description
      • 2.3.8.3. nsDS5ReplicaBindDN
      • 2.3.8.4. nsDS5ReplicaBindMethod
      • 2.3.8.5. nsDS5ReplicaBusyWaitTime
      • 2.3.8.6. nsDS5ReplicaChangesSentSinceStartup
      • 2.3.8.7. nsDS5ReplicaCredentials
      • 2.3.8.8. nsDS5ReplicaHost
      • 2.3.8.9. nsDS5ReplicaLastInitEnd
      • 2.3.8.10. nsDS5ReplicaLastInitStart
      • 2.3.8.11. nsDS5ReplicaLastInitStatus
      • 2.3.8.12. nsDS5ReplicaLastUpdateEnd
      • 2.3.8.13. nsDS5ReplicaLastUpdateStart
      • 2.3.8.14. nsDS5ReplicaLastUpdateStatus
      • 2.3.8.15. nsDS5ReplicaPort
      • 2.3.8.16. nsDS5ReplicaReapActive
      • 2.3.8.17. nsDS5BeginReplicaRefresh
      • 2.3.8.18. nsDS5ReplicaRoot
      • 2.3.8.19. nsDS5ReplicaSessionPauseTime
      • 2.3.8.20. nsDS5ReplicatedAttributeList
      • 2.3.8.21. nsDS5ReplicaTimeout
      • 2.3.8.22. nsDS5ReplicaTransportInfo
      • 2.3.8.23. nsDS5ReplicaUpdateInProgress
      • 2.3.8.24. nsDS5ReplicaUpdateSchedule
      • 2.3.8.25. nsDS50ruv
      • 2.3.8.26. nsruvReplicaLastModified
    • 2.3.9. Synchronization Attributes under cn=syncAgreementName, cn=WindowsReplica,cn="suffixName", cn=mapping tree, cn=config
      • 2.3.9.1. nsds7DirectoryReplicaSubtree
      • 2.3.9.2. nsds7DirsyncCookie
      • 2.3.9.3. nsds7NewWinGroupSyncEnabled
      • 2.3.9.4. nsds7NewWinUserSyncEnabled
      • 2.3.9.5. nsds7WindowsDomain
      • 2.3.9.6. nsds7WindowsReplicaSubtree
      • 2.3.9.7. winSyncInterval
    • 2.3.10. cn=monitor
    • 2.3.11. cn=replication
    • 2.3.12. cn=sasl
      • 2.3.12.1. nsSaslMapBaseDNTemplate
      • 2.3.12.2. nsSaslMapFilterTemplate
      • 2.3.12.3. nsSaslMapRegexString
    • 2.3.13. cn=SNMP
      • 2.3.13.1. nssnmpenabled
      • 2.3.13.2. nssnmporganization
      • 2.3.13.3. nssnmplocation
      • 2.3.13.4. nssnmpcontact
      • 2.3.13.5. nssnmpdescription
      • 2.3.13.6. nssnmpmasterhost
      • 2.3.13.7. nssnmpmasterport
    • 2.3.14. SNMP Statistic Attributes
    • 2.3.15. cn=tasks
      • 2.3.15.1. Task Invocation Attributes for Entries under cn=tasks
      • 2.3.15.2. cn=import
      • 2.3.15.3. cn=export
      • 2.3.15.4. cn=backup
      • 2.3.15.5. cn=restore
      • 2.3.15.6. cn=index
      • 2.3.15.7. cn=schema reload task
      • 2.3.15.8. cn=memberof task
    • 2.3.16. cn=uniqueid generator
  • 2.4. Configuration Object Classes
    • 2.4.1. changeLogEntry (Object Class)
    • 2.4.2. directoryServerFeature (Object Class)
    • 2.4.3. nsBackendInstance (Object Class)
    • 2.4.4. nsChangelog4Config (Object Class)
    • 2.4.5. nsContainer (Object Class)
    • 2.4.6. nsDS5Replica (Object Class)
    • 2.4.7. nsDS5ReplicationAgreement (Object Class)
    • 2.4.8. nsDSWindowsReplicationAgreement (Object Class)
    • 2.4.9. nsMappingTree (Object Class)
    • 2.4.10. nsSaslMapping (Object Class)
    • 2.4.11. nsslapdConfig (Object Class)
    • 2.4.12. passwordpolicy (Object Class)
  • 2.5. Legacy Attributes
    • 2.5.1. Legacy Server Attributes
      • 2.5.1.1. LDAPServer (Object Class)
      • 2.5.1.2. changeLogMaximumAge
      • 2.5.1.3. changeLogMaximumConcurrentWrites
      • 2.5.1.4. changeLogMaximumSize
      • 2.5.1.5. generation
      • 2.5.1.6. nsSynchUniqueAttribute
      • 2.5.1.7. nsSynchUserIDFormat
    • 2.5.2. Legacy Replication Attributes
      • 2.5.2.1. cirReplicaSource (Object Class)
      • 2.5.2.2. cirBeginORC
      • 2.5.2.3. cirBindCredentials
      • 2.5.2.4. cirBindDN
      • 2.5.2.5. cirHost
      • 2.5.2.6. cirLastUpdateApplied
      • 2.5.2.7. cirPort
      • 2.5.2.8. cirReplicaRoot
      • 2.5.2.9. cirSyncInterval
      • 2.5.2.10. cirUpdateFailedAt
      • 2.5.2.11. cirUpdateSchedule
      • 2.5.2.12. cirUsePersistentSearch
      • 2.5.2.13. cirUseSSL
      • 2.5.2.14. LDAPReplica (Object Class)
      • 2.5.2.15. replicaAbandonedChanges
      • 2.5.2.16. replicaBeginOrc
      • 2.5.2.17. replicaBindDn
      • 2.5.2.18. replicaBindMethod
      • 2.5.2.19. replicaCFUpdated
      • 2.5.2.20. replicaCredentials
      • 2.5.2.21. replicaEntryFilter
      • 2.5.2.22. replicaHost
      • 2.5.2.23. replicaLastRelevantChange
      • 2.5.2.24. replicaNickName
      • 2.5.2.25. replicaPort
      • 2.5.2.26. replicaRoot
      • 2.5.2.27. replicatedAttributeList
      • 2.5.2.28. replicaUpdateFailedAt
      • 2.5.2.29. replicaUpdateReplayed
      • 2.5.2.30. replicaUpdateSchedule
      • 2.5.2.31. replicaUseSSL
• Chapter 3. Plug-in Implemented Server Functionality Reference
  • 3.1. Server Plug-in Functionality Reference
    • 3.1.1. 7-bit Check Plug-in
    • 3.1.2. ACL Plug-in
    • 3.1.3. ACL Preoperation Plug-in
    • 3.1.4. Attribute Uniqueness Plug-in
    • 3.1.5. Binary Syntax Plug-in
    • 3.1.6. Boolean Syntax Plug-in
    • 3.1.7. Case Exact String Syntax Plug-in
    • 3.1.8. Case Ignore String Syntax Plug-in
    • 3.1.9. Chaining Database Plug-in
    • 3.1.10. Class of Service Plug-in
    • 3.1.11. Country String Syntax Plug-in
    • 3.1.12. Distinguished Name Syntax Plug-in
    • 3.1.13. Distributed Numeric Assignment Plug-in
    • 3.1.14. Generalized Time Syntax Plug-in
    • 3.1.15. HTTP Client Plug-in
    • 3.1.16. Integer Syntax Plug-in
    • 3.1.17. Internationalization Plug-in
    • 3.1.18. JPEG Syntax Plug-in
    • 3.1.19. ldbm database Plug-in
    • 3.1.20. Legacy Replication Plug-in
    • 3.1.21. MemberOf Plug-in
    • 3.1.22. Multi-master Replication Plug-in
    • 3.1.23. Octet String Syntax Plug-in
    • 3.1.24. OID Syntax Plug-in
    • 3.1.25. Password Storage Schemes
    • 3.1.26. Postal Address String Syntax Plug-in
    • 3.1.27. PTA Plug-in
    • 3.1.28. Referential Integrity Postoperation Plug-in
    • 3.1.29. Retro Changelog Plug-in
    • 3.1.30. Roles Plug-in
    • 3.1.31. Schema Reload Plug-in
    • 3.1.32. Space Insensitive String Syntax Plug-in
    • 3.1.33. State Change Plug-in
    • 3.1.34. Telephone Syntax Plug-in
    • 3.1.35. URI Syntax Plug-in
    • 3.1.36. Views Plug-in
  • 3.2. List of Attributes Common to All Plug-ins
    • 3.2.1. nsSlapdPlugin
    • 3.2.2. nsslapd-pluginPath
    • 3.2.3. nsslapd-pluginInitfunc
    • 3.2.4. nsslapd-pluginType
    • 3.2.5. nsslapd-pluginEnabled
    • 3.2.6. nsslapd-pluginId
    • 3.2.7. nsslapd-pluginVersion
    • 3.2.8. nsslapd-pluginVendor
    • 3.2.9. nsslapd-pluginDescription
  • 3.3. Attributes Allowed by Certain Plug-ins
    • 3.3.1. nsslapd-pluginLoadNow
    • 3.3.2. nsslapd-pluginLoadGlobal
    • 3.3.3. nsslapd-plugin-depends-on-type
    • 3.3.4. nsslapd-plugin-depends-on-named
  • 3.4. Database Plug-in Attributes
    • 3.4.1. Database Attributes under cn=config, cn=ldbm database, cn=plugins, cn=config
      • 3.4.1.1. nsLookThroughLimit
      • 3.4.1.2. nsslapd-idlistscanlimit
      • 3.4.1.3. nsslapd-cache-autosize
      • 3.4.1.4. nsslapd-cache-autosize-split
      • 3.4.1.5. nsslapd-dbcachesize
      • 3.4.1.6. nsslapd-db-checkpoint-interval
      • 3.4.1.7. nsslapd-db-circular-logging
      • 3.4.1.8. nsslapd-db-debug
      • 3.4.1.9. nsslapd-db-durable-transactions
      • 3.4.1.10. nsslapd-db-home-directory
      • 3.4.1.11. nsslapd-db-idl-divisor
      • 3.4.1.12. nsslapd-db-logbuf-size
      • 3.4.1.13. nsslapd-db-logdirectory
      • 3.4.1.14. nsslapd-db-logfile-size
      • 3.4.1.15. nsslapd-db-page-size
      • 3.4.1.16. nsslapd-db-spin-count
      • 3.4.1.17. nsslapd-db-transaction-batch-val
      • 3.4.1.18. nsslapd-db-trickle-percentage
      • 3.4.1.19. nsslapd-db-verbose
      • 3.4.1.20. nsslapd-dbncache
      • 3.4.1.21. nsslapd-directory
      • 3.4.1.22. nsslapd-import-cachesize
      • 3.4.1.23. nsslapd-import-cache-autosize
      • 3.4.1.24. nsslapd-mode
    • 3.4.2. Database Attributes under cn=monitor, cn=ldbm database, cn=plugins, cn=config
    • 3.4.3. Database Attributes under cn=NetscapeRoot, cn=ldbm database, cn=plugins, cn=config and cn=userRoot, cn=ldbm database, cn=plugins, cn=config
      • 3.4.3.1. nsslapd-cachesize
      • 3.4.3.2. nsslapd-cachememsize
      • 3.4.3.3. nsslapd-directory
      • 3.4.3.4. nsslapd-readonly
      • 3.4.3.5. nsslapd-require-index
      • 3.4.3.6. nsslapd-suffix
      • 3.4.3.7. vlvBase
      • 3.4.3.8. vlvEnabled
      • 3.4.3.9. vlvFilter
      • 3.4.3.10. vlvIndex (Object Class)
      • 3.4.3.11. vlvScope
      • 3.4.3.12. vlvSearch (Object Class)
      • 3.4.3.13. vlvSort
      • 3.4.3.14. vlvUses
    • 3.4.4. Database Attributes under cn=database, cn=monitor, cn=ldbm database, cn=plugins, cn=config
    • 3.4.5. Database Attributes under cn=default indexes, cn=config, cn=ldbm database, cn=plugins, cn=config
      • 3.4.5.1. cn
      • 3.4.5.2. description
      • 3.4.5.3. nsIndex
      • 3.4.5.4. nsIndexType
      • 3.4.5.5. nsMatchingRule
      • 3.4.5.6. nsSystemIndex
    • 3.4.6. Database Attributes under cn=monitor, cn=NetscapeRoot, cn=ldbm database, cn=plugins, cn=config
    • 3.4.7. Database Attributes under cn=index, cn=NetscapeRoot, cn=ldbm database, cn=plugins, cn=config and cn=index, cn=UserRoot, cn=ldbm database, cn=plugins, cn=config
      • 3.4.7.1. nsSubStrBegin
      • 3.4.7.2. nsSubStrEnd
      • 3.4.7.3. nsSubStrMiddle
    • 3.4.8. Database Attributes under cn=attributeName, cn=encrypted attributes, cn=database_name, cn=ldbm database, cn=plugins, cn=config
      • 3.4.8.1. nsAttributeEncryption (Object Class)
      • 3.4.8.2. nsEncryptionAlgorithm
  • 3.5. Database Link Plug-in Attributes (Chaining Attributes)
    • 3.5.1. Database Link Attributes under cn=config, cn=chaining database, cn=plugins, cn=config
      • 3.5.1.1. nsActiveChainingComponents
      • 3.5.1.2. nsMaxResponseDelay
      • 3.5.1.3. nsMaxTestResponseDelay
      • 3.5.1.4. nsTransmittedControls
    • 3.5.2. Database Link Attributes under cn=default instance config, cn=chaining database, cn=plugins, cn=config
      • 3.5.2.1. nsAbandonedSearchCheckInterval
      • 3.5.2.2. nsBindConnectionsLimit
      • 3.5.2.3. nsBindRetryLimit
      • 3.5.2.4. nsBindTimeout
      • 3.5.2.5. nsCheckLocalACI
      • 3.5.2.6. nsConcurrentBindLimit
      • 3.5.2.7. nsConcurrentOperationsLimit
      • 3.5.2.8. nsConnectionLife
      • 3.5.2.9. nsOperationConnectionsLimit
      • 3.5.2.10. nsProxiedAuthorization
      • 3.5.2.11. nsReferralOnScopedSearch
      • 3.5.2.12. nsSizeLimit
      • 3.5.2.13. nsTimeLimit
    • 3.5.3. Database Link Attributes under cn=database_link_name, cn=chaining database, cn=plugins, cn=config
      • 3.5.3.1. nsBindMechanism
      • 3.5.3.2. nsFarmServerURL
      • 3.5.3.3. nsMultiplexorBindDn
      • 3.5.3.4. nsMultiplexorCredentials
      • 3.5.3.5. nshoplimit
      • 3.5.3.6. nsUseStartTLS
    • 3.5.4. Database Link Attributes under cn=monitor, cn=database instance name, cn=chaining database, cn=plugins, cn=config
  • 3.6. Retro Changelog Plug-in Attributes
    • 3.6.1. nsslapd-changelogdir
    • 3.6.2. nsslapd-changelogmaxage (Max Changelog Age)
  • 3.7. Distributed Numeric Assignment Plug-in Attributes
    • 3.7.1. dnaFilter
    • 3.7.2. dnaMagicRegen
    • 3.7.3. dnaMaxValue
    • 3.7.4. dnaNextRange
    • 3.7.5. dnaNextValue
    • 3.7.6. dnaPrefix
    • 3.7.7. dnaRangeRequestTimeout
    • 3.7.8. dnaScope
    • 3.7.9. dnaSharedCfgDN
    • 3.7.10. dnaThreshold
    • 3.7.11. dnaType
  • 3.8. MemberOf Plug-in Attributes
    • 3.8.1. memberofattr
    • 3.8.2. memberofgroupattr
• Chapter 4. Server Instance File Reference
  • 4.1. Overview of Directory Server Files
  • 4.2. Backup Files
  • 4.3. Configuration Files
  • 4.4. Database Files
  • 4.5. LDIF Files
  • 4.6. Lock Files
  • 4.7. Log Files
  • 4.8. PID Files
  • 4.9. Tools
  • 4.10. Scripts
• Chapter 5. Log File Reference
  • 5.1. Access Log Reference
    • 5.1.1. Access Logging Levels
    • 5.1.2. Default Access Logging Content
    • 5.1.3. Access Log Content for Additional Access Logging Levels
    • 5.1.4. Common Connection Codes
  • 5.2. Error Log Reference
    • 5.2.1. Error Log Logging Levels
    • 5.2.2. Error Log Content
    • 5.2.3. Error Log Content for Other Log Levels
  • 5.3. Audit Log Reference
  • 5.4. LDAP Result Codes
• Chapter 6. Command-Line Utilities
  • 6.1. Finding and Executing Command-Line Utilities
  • 6.2. Using Special Characters
  • 6.3. Command-Line Utilities Quick Reference
  • 6.4. ldapsearch
  • 6.5. ldapmodify
  • 6.6. ldapdelete
  • 6.7. ldappasswd
  • 6.8. ldif
  • 6.9. dbscan
• Chapter 7. Command-Line Scripts
  • 7.1. Finding and Executing Command-Line Scripts
  • 7.2. Command-Line Scripts Quick Reference
  • 7.3. Shell Scripts
    • 7.3.1. bak2db (Restores a Database from Backup)
    • 7.3.2. cl-dump (Dumps and Decodes the Changelog)
    • 7.3.3. db2bak (Creates a Backup of a Database)
    • 7.3.4. db2ldif (Exports Database Contents to LDIF)
    • 7.3.5. db2index (Reindexes Database Index Files)
    • 7.3.6. dbverify (Checks for Corrupt Databases)
    • 7.3.7. ds_removal
    • 7.3.8. ldif2db (Import)
    • 7.3.9. ldif2ldap (Performs Import Operation over LDAP)
    • 7.3.10. monitor (Retrieves Monitoring Information)
    • 7.3.11. repl-monitor (Monitors Replication Status)
    • 7.3.12. pwdhash (Prints Encrypted Passwords)
    • 7.3.13. restart-slapd (Restarts the Directory Server)
    • 7.3.14. restoreconfig (Restores Administration Server Configuration)
    • 7.3.15. saveconfig (Saves Administration Server Configuration)
    • 7.3.16. start-slapd (Starts the Directory Server)
    • 7.3.17. stop-slapd (Stops the Directory Server)
    • 7.3.18. suffix2instance (Maps a Suffix to a Backend Name)
    • 7.3.19. vlvindex (Creates Virtual List View Indexes)
  • 7.4. Perl Scripts
    • 7.4.1. bak2db.pl (Restores a Database from Backup)
    • 7.4.2. cl-dump.pl (Dumps and Decodes the Changelog)
    • 7.4.3. db2bak.pl (Creates a Backup of a Database)
    • 7.4.4. db2index.pl (Creates and Generates Indexes)
    • 7.4.5. db2ldif.pl (Exports Database Contents to LDIF)
    • 7.4.6. fixup-memberof.pl (Regenerate memberOf Attributes)
    • 7.4.7. ldif2db.pl (Import)
    • 7.4.8. logconv.pl (Log Converter)
    • 7.4.9. migrate-ds.pl
    • 7.4.10. migrate-ds-admin.pl
    • 7.4.11. ns-accountstatus.pl (Establishes Account Status)
    • 7.4.12. ns-activate.pl (Activates an Entry or Group of Entries)
    • 7.4.13. ns-inactivate.pl (Inactivates an Entry or Group of Entries)
    • 7.4.14. ns-newpwpolicy.pl (Adds Attributes for Fine-Grained Password Policy)
    • 7.4.15. register-ds-admin.pl
    • 7.4.16. remove-ds.pl
    • 7.4.17. repl-monitor.pl (Monitors Replication Status)
    • 7.4.18. schema-reload.pl (Reload Schema Files Dynamically)
    • 7.4.19. setup-ds.pl
    • 7.4.20. setup-ds-admin.pl
    • 7.4.21. verify-db.pl (Check for Corrupt Databases)
• Appendix A. Using the ns-slapd Command-Line Utilities
  • A.1. Overview of ns-slapd
  • A.2. Finding and Executing the ns-slapd Command-Line Utilities
  • A.3. Utilities for Exporting Databases: db2ldif
  • A.4. Utilities for Restoring and Backing up Databases: ldif2db
  • A.5. Utilities for Restoring and Backing up Databases: archive2db
  • A.6. Utilities for Restoring and Backing up Databases: db2archive
  • A.7. Utilities for Creating and Regenerating Indexes: db2index
• Glossary
• Index