HP-UX Directory Server 8.1 configuration, command, and file reference

2.3.3.5 nsssl3ciphers
This multi-valued attribute specifies the set of encryption ciphers the Directory Server uses during
SSL communications. For more information on the ciphers supported by the Directory Server,
see the "Managing SSL" chapter in the HP-UX Directory Server administrator guide.
DescriptionParameter
cn=encryption,cn=configEntry DN
For SSLv3:
• rsa_null_md5
• rsa_rc4_128_md5
• rsa_rc4_40_md5
• rsa_rc2_40_md5
• rsa_des_sha
• rsa_fips_des_sha
• rsa_3des_sha
• rsa_fips_3des_sha
For TLS:
• tls_rsa_export1024_with_rc4_56_sha
• tls_rsa_export1024_with_des_cbc_sha
Valid Values
Default Value
DirectoryString
Use the plus (+) symbol to enable or minus (-) symbol to disable, followed by the ciphers.
Blank spaces are not allowed in the list of ciphers.
To enable all ciphers (except rsa_null_md5, which must be specifically called) specify
+all.
Syntax
nsslapd-SSL3ciphers: +RSA_NULL_MD5,+RC4_56_SHA,-RC4_56_SHAExample
For more information, see the "Managing SSL" chapter in the HP-UX Directory Server administrator
guide
2.3.4 cn=features,cn=config
There are no relevant attributes for this entry. This entry is only used as a parent container entry.
See the documentation on the child entries for more information.
2.3.5 cn=mapping tree,cn=config
• Configuration attributes for suffixes, replication, and Windows synchronization are stored
under cn=mapping tree,cn=config. Configuration attributes related to suffixes are
found under the suffix subentry cn=suffix, cn=mapping tree,cn=config.
For example, a suffix is the root entry in the directory tree, such as dc=example,dc=com.
• Replication configuration attributes are stored under cn=replica, cn=suffix,
cn=mapping tree,cn=config.
• Replication agreement attributes are stored under cn=replicationAgreementName,
cn=replica, cn=suffix,cn=mapping tree,cn=config.
• Windows synchronization agreement attributes are stored under cn=syncAgreementName,
cn=replica, cn=suffix,cn=mapping tree,cn=config.
2.3.6 Suffix configuration attributes under cn="suffixName"
Suffix configuration attributes are stored under the cn=suffix entry. The cn=suffix entry is
an instance of the nsMappingTree object class which inherits from the extensibleObject
2.3 Core server configuration attributes reference 75