Red Hat DIRECTORY SERVER 8.1 Command Reference Manual page 56

Chapter 2. Core Server Configuration Reference
2.3.1.74. nsslapd-localuser (Local User)
This attribute sets the user as whom the Directory Server runs. The group as which the user runs is
derived from this attribute by examining the user's primary group. Should the user change, then all of
the instance-specific files and directories for this instance need to be changed to be owned by the new
user, using a tool such as chown.
The value for the nsslapd-localuser is set initially when the server instance is configured.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.75. nsslapd-lockdir (Server Lock File Directory)
This is the full path to the directory the server uses for lock files. The default value is /var/lock/
dirsrv/slapd-instance_name. Changes to this value will not take effect until the server is
restarted.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.76. nsslapd-maxbersize (Maximum Message Size)
Defines the maximum size in bytes allowed for an incoming message. This limits the size of LDAP
requests that can be handled by the Directory Server. Limiting the size of requests prevents some
kinds of denial of service attacks.
The limit applies to the total size of the LDAP request. For example, if the request is to add an entry
and if the entry in the request is larger than two megabytes, then the add request is denied. Be
cautious before changing this attribute.
The server should be restarted for changes in this attribute to take effect.
Parameter
Entry DN
Valid Range
42
Description
cn=config
Any valid user
DirectoryString
nsslapd-localuser: nobody
Description
cn=config
Absolute path to a directory owned by the server
user ID with write access to the server ID
/var/lock/dirsrv/slapd-instance_name
DirectoryString
nsslapd-lockdir: /var/lock/dirsrv/
slapd-instance_name
Description
cn=config
0 - 2 gigabytes (2,147,483,647 bytes)
Zero 0 means that the default value should be
used.