Red Hat 8.1 Configuration And Command Reference page 24

24
Chapter 2. Core Server Configuration Reference
Example
2.3.1.22. nsslapd-auditlog-logexpirationtime (Audit Log Expiration T ime)
T his attribute sets the maximum age that a log file is allowed to be before it is deleted. T his attribute
supplies only the number of units. T he units (day, week, month, and so forth) are given by the nsslapd-
auditlog-logexpirationtimeunit attribute.
Parameter
Entry DN
Valid Range
Default Value
Syntax
Example
2.3.1.23. nsslapd-auditlog-logexpirationtimeunit (Audit Log Expiration T ime Unit)
T his attribute sets the units for the nsslapd-auditlog-logexpirationtime attribute. If the unit is
unknown by the server, then the log never expires.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.24 . nsslapd-auditlog-logging-enabled (Audit Log Enable Logging)
T urns audit logging on and off.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
For audit logging to be enabled, this attribute must have a valid path and parameter and the nsslapd-
auditlog-logging-enabled configuration attribute must be switched to on. T he table lists the four
possible combinations of values for these two configuration attributes and their outcome in terms of
disabling or enabling of audit logging.
T able 2.5. Possible combinations for nsslapd-auditlog and nsslapd-auditlog-logging-enabled
Attribute
nsslapd-auditlog-logging-
enabled
nsslapd-auditlog
nsslapd-auditlog-logging-
enabled
nsslapd-auditlog
nsslapd-auditlog-logging-
enabled
nsslapd-auditlog
nsslapd-auditlog-logging-
enabled
nsslapd-auditlog
2.3.1.25. nsslapd-auditlog-logmaxdiskspace (Audit Log Maximum Disk Space)
nsslapd-auditlog-list: auditlog2,auditlog3
Description
cn=config
-1 to the maximum 32 bit integer value
(2147483647)
A value of -1 or 0 means that the log never
expires.
-1
Integer
nsslapd-auditlog-logexpirationtime: 1
Description
cn=config
month | week | day
week
DirectoryString
nsslapd-auditlog-logexpirationtimeunit: day
Description
cn=config
on | off
off
DirectoryString
nsslapd-auditlog-logging-enabled: off
Value
on
empty string
on
filename
off
empty string
off
filename
Logging enabled or disabled
Disabled
Enabled
Disabled
Disabled