Red Hat DIRECTORY SERVER 8.1 Command Reference Manual page 68

Chapter 2. Core Server Configuration Reference
port number. Specifying a port number of less than 1024 requires that Directory Server be started as
root. The server sets its uid to the nsslapd-localuser value after startup.
The server only listens to this port if it has been configured with a private key and a certificate, and
nsslapd-security is set to on; otherwise, it does not listen on this port.
The server has to be restarted for the port number change to be taken into account.
Parameter
Entry DN
Valid Range
Default Value
Syntax
Example
2.3.1.102. nsslapd-security (Security)
This attribute sets whether the Directory Server is to accept SSL/TLS communications on its encrypted
port. This attribute should be set to on for secure connections. To run with security on, the server must
be configured with a private key and server certificate in addition to the other SSL/TLS configuration.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.103. nsslapd-sizelimit (Size Limit)
This attribute sets the maximum number of entries to return from a search operation. If this limit is
reached, ns-slapd returns any entries it has located that match the search request, as well as an
exceeded size limit error.
When no limit is set, ns-slapd returns every matching entry to the client regardless of the number
found. To set a no limit value whereby the Directory Server waits indefinitely for the search to
complete, specify a value of -1 for this attribute in the dse.ldif file.
This limit applies to everyone, regardless of their organization.
NOTE
A value of -1 on this attribute in dse.ldif file is the same as leaving the attribute blank
in the server console, in that it causes no limit to be used. This cannot have a null value
in dse.ldif file, as it is not a valid integer. It is possible to set it to 0, which returns size
limit exceeded for every search.
Parameter
Entry DN
54
Description
cn=config
1 to 65535
636
Integer
nsslapd-securePort: 636
Description
cn=config
on | off
off
DirectoryString
nsslapd-security: off
Description
cn=config