Red Hat 8.1 Configuration And Command Reference page 38

38
Chapter 2. Core Server Configuration Reference
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
NOTE
On HP-UX the hostname value can be a relocatable IP address.
2.3.1.73. nsslapd-localhost (Local Host)
T his attribute specifies the host machine on which the Directory Server runs. T his attribute is used to
create the referral URL that forms part of the MMR protocol. In a high-availability configuration with
failover nodes, that referral should point to the virtual name of the cluster, not the local hostname.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.74 . nsslapd-localuser (Local User)
T his attribute sets the user as whom the Directory Server runs. T he group as which the user runs is
derived from this attribute by examining the user's primary group. Should the user change, then all of the
instance-specific files and directories for this instance need to be changed to be owned by the new user,
using a tool such as chown.
T he value for the nsslapd-localuser is set initially when the server instance is configured.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.75. nsslapd-lockdir (Server Lock File Directory)
T his is the full path to the directory the server uses for lock files. T he default value is
/var/lock/dirsrv/slapd-instance_name. Changes to this value will not take effect until the server
is restarted.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.76. nsslapd-maxbersize (Maximum Message Size)
Defines the maximum size in bytes allowed for an incoming message. T his limits the size of LDAP
requests that can be handled by the Directory Server. Limiting the size of requests prevents some kinds
of denial of service attacks.
T he limit applies to the total size of the LDAP request. For example, if the request is to add an entry and
if the entry in the request is larger than two megabytes, then the add request is denied. Be cautious
before changing this attribute.
T he server should be restarted for changes in this attribute to take effect.
Parameter
Description
cn=config
Any local hostname, IPv4 or IPv6 address
DirectoryString
nsslapd-listenhost: ldap.example.com
Description
cn=config
Any fully qualified hostname.
Hostname of installed machine.
DirectoryString
nsslapd-localhost: phonebook.example.com
Description
cn=config
Any valid user
DirectoryString
nsslapd-localuser: nobody
Description
cn=config
Absolute path to a directory owned by the server
user ID with write access to the server ID
/var/lock/dirsrv/slapd-instance_name
DirectoryString
nsslapd-lockdir:
/var/lock/dirsrv/slapd-instance_name
Description