LDAP-UX Client Services B.05.01 Administrator Guide for HP directory servers and Windows ADS

The default value is 600 (10 minutes).
cache_size=<102400-1073741823>
The maximum number of bytes that should be cached by ldapclientd
for all services except dynamic_group. This value is the maximum, upper
limit, of memory that can be used by ldapclientd for all services
except dynamic_group. If this limit is reached, new entries are not cached
until enough expired entries are freed to allow it.
The default value is 10000000.
state_dump_time=<0-2147483647>
As state, functions like a virtual between the client and LDAP server, is
created for setXXent() request, and stays for the subsequent
getXXent() requests. If no get requests are received in the specified
time interval (in seconds), the state will be removed. The default value
is 300 (in seconds).
max_enumeration_states=<0-95>[%]
The maximum number of states that ldapclientd allows. It means the
number of enumeration ldapclientd will handle simultaneously. This
number must be less than max_conn and it is configured as a
percentage of max_conn. The minimum value is 0% and maximum
value is 95%. The default value is 80%. A value of 0% disables
enumeration.
poscache_ttl=<0-2147483647>
The time, in seconds, before a cache entry expires from the positive
cache. There is no [general] default value for this setting. Each cache
section has its own default values. Specifying a value under [general]
will override poscache_ttl defaults in other sections (where no specific
poscache_ttl definitions are specified).
negcache_ttl=<0-2147483647>
The time, in seconds, before a cache entry expires from the negative
cache. There is no [general] default value for this setting. Each cache
section has its own default value.
proxy_is_restricted=yes|no
If the proxy user is configured in the LDAP-UX profile and defined in
/etc/opt/ldapux/pcred, this flag attests that the proxy user does
not hold privileged LDAP credentials, meaning the proxy user is restricted
in its rights to access "private" information in the directory server. As of
release B.05.00, ldapclientd provides a local interface to allow
specialized directory-enabled applications to access arbitrary attributes
in HP-UX related directory entries. By default, and if set to no,
ldapclientd will not allow access to attributes beyond that of the
RFC2307 schema and any attribute defined using the
allowed_attribute token. If proxy_is_restricted is set to
yes, then you are attesting that the directory server is restricting access
to private or other confidential information from access by the proxy
user. This allows specialized applications to access any attribute visible
to the proxy user. The default value for this setting is no, meaning
ldapclientd assumes the proxy user has rights beyond that of a
nonprivileged user.
allowed_attribute=service:attribute
186 Administering LDAP-UX Client Services