Service manual

Using Available System Resources
152 Sun ONE Directory Server Installation and Tuning Guide • June 2003
Refer to the Sun ONE Directory Server Reference Manual for details concerning
individual configuration attributes.
Using Available System Resources
Depending on deployment requirements, you may choose to tune how a Directory
Server instance uses system and network resources, how access control is
managed, and how server plug-ins are configured. The recommendations in
Table 9-2 address settings for system resources.
dn: cn=config
nsslapd-timelimit
Sets the maximum number of seconds Directory Server allows
for handling a search request.
Some applications, such as messaging servers, may need to
perform very large searches. Ideally, you might dedicate a
replica to support the application in this case. If that is not
possible, consider bind DN-based limits.
In any case, set this value as low as you can and still meet
deploymentrequirements.Thedefaultvalueof3600seconds(1
hour)is largerthannecessaryfor manydeployments.Consider
using 600 seconds (10 minutes) as a starting point for
optimization tests.
Table 9-2 Tuning Recommendations for Configuring Use of System Resources
Attribute (on dn: cn=config) Short Description and Tuning Recommendations
nsslapd-listenhost Sets the hostname for the IP interface on which Directory Server
listens. This attribute is single-valued.
Default behavior is to listen on all interfaces. The default behavior is
adapted for high volume deployments using redundant network
interfaces for availability and throughput.
Consider setting this value when deploying on a multihomed system,
or when listening only for IPv4 or IPv6 traffic on a system supporting
each protocol through a separate interface. Consider setting
nsslapd-securelistenhost when usingSSL.
Table 9-1 Tuning Recommendations for Limiting Resources Available to Clients (Continued)
Configuration Entry DN and Attribute Short Description and Tuning Recommendations