Red Hat DIRECTORY SERVER 8.0 Command Reference Manual page 45

of the log file is deleted. The default is 1 log. If this default is accepted, the server does not rotate the
log, and it grows indefinitely.
If the value for this attribute is higher than 1, then check the nsslapd-errorlog-
logrotationtime attribute to establish whether log rotation is specified. If the nsslapd-
errorlog-logrotationtime attribute has a value of -1, then there is no log rotation. See
Section 2.3.1.52, "nsslapd-errorlog-logrotationtime (Error Log Rotation Time)"
Parameter
Entry DN
Valid Range
Default Value
Syntax
Example
2.3.1.56. nsslapd-errorlog-mode (Error Log File Permission)
This attribute sets the access mode or file permissions with which error log files are to be created.
The valid values are any combination of 000 to 777 since they mirror numbered or absolute UNIX file
permissions. That is, the value must be a combination of a 3-digit number, the digits varying from 0
through 7:
• 0 - None
• 1 - Execute only
• 2 - Write only
• 3 - Write and execute
• 4 - Read only
• 5 - Read and execute
• 6 - Read and write
• 7 - Read, write, and execute
In the 3-digit number, the first digit represents the owner's permissions, the second digit represents the
group's permissions, and the third digit represents everyone's permissions. When changing the default
value, remember that 000 does not allow access to the logs and that allowing write permissions to
everyone can result in the logs being overwritten or deleted by anyone.
The newly configured access mode only affects new logs that are created; the mode is set when the
log rotates to a new file.
Parameter
Entry DN
Valid Range
Default Value
Syntax
Description
cn=config
1 to the maximum 32 bit integer value
(2147483647)
1
Integer
nsslapd-errorlog-maxlogsperdir: 10
Description
cn=config
000 through 777
600
Integer
cn=config
for more information.
35