Cn=Config; Nsslapd-Accesscontrol (Enable Access Control); Nsslapd-Accesslog (Access Log) - Netscape DIRECTORY SERVER 6.1 Configuration Manual

cn=config

General configuration entries are stored under the
entry is an instance of the
cn=config
inherits from
extensibleObject
account by the server, both of these object classes (in addition to the
class) must be present in the entry. General configuration entries are presented in
this section.

nsslapd-accesscontrol (Enable Access Control)

Turns access control on and off. If this attribute has a value
bind attempt (including an anonymous bind) results in full access to all
information stored in the Directory Server.
Entry DN:
cn=config
Valid Values: on | off
Default Value:
on
Syntax: DirectoryString
Example:
nsslapd-accesscontrol: off

nsslapd-accesslog (Access Log)

Specifies the path and filename of the log used to record each database access. The
following information is recorded by default in the log file:
• IP address of the client machine that accessed the database
• Operations performed (for example, search, add, modify)
• Result of the access (for example, the number of entries returned)
For more information on turning access logging off, see Chapter 12, "Monitoring
Server and Database Activity" in the Netscape Directory Server Administrator's
Guide.
For access logging to be enabled, this attribute must have a valid path and filename
and the
nsslapd-accesslog-logging-enabled
switched to . The table below lists the four possible combinations of values for
on
these two configuration attributes and their outcome in terms of disabling or
enabling of access logging.
Core Server Configuration Attributes Reference
cn=config
object class, which in turn
nsslapdConfig
object class. For attributes to be taken into
configuration attribute must be
Chapter 2 Core Server Configuration Reference
entry. The
object
top
, then any valid
off
37