Red Hat Directory Server 8.0 Configuration, Command, and File Reference

Parameter Description

Entry DN cn=config

Valid Values Absolute path to a directory owned by the

server user ID with write access to the server

Default Value /var/lock/dirsrv/slapd-instance_name

Syntax DirectoryString

Example nsslapd-lockdir:

/var/lock/dirsrv/slapd-instance_name

3.1.66. nsslapd-maxbersize (Maximum Message Size)

Defines the maximum size in bytes allowed for an incoming message. This limits the size of

LDAP requests that can be handled by the Directory Server. Limiting the size of requests

prevents some kinds of denial of service attacks.

The limit applies to the total size of the LDAP request. For example, if the request is to add an

entry and if the entry in the request is larger than two megabytes, then the add request is

denied. Be cautious before changing this attribute, and Red Hat recommends contacting

Directory Server support first.

Parameter Description

Entry DN cn=config

Valid Range

0 - 2 gigabytes (2,147,483,647 bytes)

Zero 0 means that the default value should be

used.

Default Value 2097152

Syntax Integer

Example nsslapd-maxbersize: 2097152

3.1.67. nsslapd-maxdescriptors (Maximum File Descriptors)

This attribute sets the maximum, platform-dependent number of file descriptors that the

Directory Server tries to use. A file descriptor is used whenever a client connects to the server

and also for some server activities, such as index maintenance. File descriptors are also used

by access logs, error logs, audit logs, database files (indexes and transaction logs), and as

sockets for outgoing connections to other servers for replication and chaining.

The number of descriptors available for TCP/IP to serve client connections is determined by

nsslapd-conntablesize, and is equal to the nsslapd-maxdescriptors attribute minus the

number of file descriptors used by the server as specified in the nsslapd-reservedescriptors

cn=config