Fujitsu SPARC Enterprise M3000 Xscf Reference Manual page 240

setldapssl(8)
226 SPARC Enterprise Mx000 Servers XSCF Reference Manual • Last Revised October 2010
server
logdetail
log options clear
strictcertmode
Configure the primary and up to five alternate LDAP/
SSL servers. To use a host name, DNS must be enabled.
An IP address can be specified with port number;
otherwise, the default port is used.
Enable logging of LDAP/SSL authentication and
authorization diagnostic messages at the specified detail
level. This log is for use in troubleshooting and is cleared
on SP reboot. Level can be one of the following:
none Do not log diagnostic messages. Use
this setting during normal system
operation
high Log only high-severity diagnostic
messages
medium Log only high-severity and medium-
severity diagnostic messages
low Log high-severity, medium-severity,
and informational diagnostic
messages
trace Log high-severity, medium-severity,
informational, and trace-level
diagnostic messages
Clear the log file of LDAP/SSL authentication and
authorization diagnostic messages.
Enable or disable strictcertmode mode. This mode is
disabled by default; the channel is secure, but limited
validation of the certificate is performed. If strictcertmode
is enabled, the server's certificate must have already been
uploaded to the server so that the certificate signatures
can be validated when the server certificate is presented.
Data is always protected, even if strictcertmode is
disabled. Strictcertmode applies to primary and alternate
servers alike.