Nsencryptionalgorithm - Red Hat DIRECTORY SERVER 7.1 Configuration

Database Plug-in Attributes
within the database; encrypting them while they are stored adds another layer of
protection. This object class has one attribute,
sets the encryption cipher used per attribute. Each encrypted attribute represents
a subentry under the above
Figure 3-3.
Figure 3-3
For example, the database encryption file for the
o=UserRoot
dn:cn=userPassword,cn=encrypted attributes,o=UserRoot,cn=ldbm
database,cn=plugins,cn=config
objectclass:top
objectclass:nsAttributeEncryption
cn=userPassword
nsEncryptionAlgorithm:AES
To configure database encryption, see "Database Encryption," in chapter 3,
"Configuring Directory Databases," in the Red Hat Directory Server Administrator's
Guide. For more information about indexes, see in chapter 10, "Managing
Indexes," in the Red Hat Directory Server Administrator's Guide.

nsEncryptionAlgorithm

nsEncryptionAlgorithm
The algorithm can be set per encrypted attribute.
Entry DN:
Valid Values:
186 Red Hat Directory Server Configuration, Command, and File Reference • May 2005
cn=config
Encrypted Attributes under the cn=config Node
would appear in the Directory Server as follows:
selects the cipher used by
cn=attributeName,cn=encrypted attributes,
cn=databaseName,cn=ldbm database,cn=plugins,cn=config
The following are supported ciphers:
•
Adavanced Encryption Standard Block Cipher
•
Triple Data Encryption Standard Block Cipher
nsEncryptionAlgorithm
information tree nodes, as shown in
userPassword
nsAttributeEncryption
, which
attribute under
.
—
AES
—
3DES