Red Hat Directory Server 8.0 Configuration, Command, and File Reference

ldapsearch on the cn=config subtree.

For a list of plug-ins supported by Directory Server, general plug-in configuration information,

the plug-in configuration attribute reference, and a list of plug-ins requiring restart for

configuration changes, see Chapter 3, Plug-in Implemented Server Functionality Reference.

1.2.3. Configuration of Databases

The cn=NetscapeRoot and cn=UserRoot subtrees under the database plug-in entry contain

configuration data for the databases containing the o=NetscapeRoot suffix and the default suffix

created during setup, such as dc=example,dc=com.

These entries and their children have many attributes used to configure different database

settings, like the cache sizes, the paths to the index files and transaction logs, entries and

attributes for monitoring and statistics; and database indexes.

1.2.4. Configuration of Indexes

Configuration information for indexing is stored as entries in the Directory Server under the

following information-tree nodes:

• cn=index,cn=NetscapeRoot,cn=ldbm database,cn=plugins,cn=config

• cn=index,cn=UserRoot,cn=ldbm database,cn=plugins,cn=config

• cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config

For more information about indexes in general, see the Directory Server Administrator's Guide.

For information about the index configuration attributes, see Section 4.1, “Database Attributes

under cn=config, cn=ldbm database, cn=plugins, cn=config”.

2. Accessing and Modifying Server Configuration

This section discusses access control for configuration entries and describes the various ways

in which the server configuration can be viewed and modified. It also covers restrictions to the

kinds of modification that can be made and discusses attributes that require the server to be

restarted for changes to take effect.

2.1. Access Control for Configuration Entries

When the Directory Server is installed, a default set of access control instructions (ACIs) is

implemented for all entries under cn=config. The following code sample is an example of these

default ACIs.

aci: (targetattr = "*")(version 3.0; acl "Configuration Administrators

Group"; allow (all)

groupdn = "ldap:///cn=Configuration Administrators,u=Groups,

ou=TopologyManagement, o=NetscapeRoot";)

Chapter 2. Core Server Configuration Reference