Generalized time syntax plug-in | HP UX Identity Security Software

Plug-in parameter	Description
Description	Syntax for handling DNs
Configurable Options	on or off
Default Setting	on
Configurable Arguments	None
Dependencies	None
Performance Related	Do not modify the configuration of this plug-in. HP recommends leaving this plug-in
Information	running at all times.
Further Information

3.1.13 Distributed numeric assignment plug-in

Table 3-1 Details of distributed numeric assignment plug-in

Plug-in information	Description
Plug-in Name	Distributed Numeric Assignment (DNA)
Configuration Entry DN	cn=Distributed Numeric Assignment
	Plugin,cn=plugins,cn=config
Description	Distributed Numeric Assignment plugin
Configurable Options	on or off
Default Setting	off
Configurable Arguments
Dependencies	None
Performance Related Information	None
Further Information

3.1.14 Generalized time syntax plug-in

Plug-in parameter	Description
Plug-in Name	Generalized Time Syntax
DN of Configuration Entry	cn=Generalized Time Syntax, cn=plugins, cn=config
Description	Syntax for dealing with dates, times and time zones
Configurable Options	on or off
Default Setting	on
Configurable Arguments	None
Dependencies	None
Performance Related	Do not modify the configuration of this plug-in. HP recommends leaving this plug-in
Information	running at all times.
Further Information	The Generalized Time String consists of a four digit year, two digit month (for
	example, 01 for January), two digit day, two digit hour, two digit minute, two digit
	second, an optional decimal part of a second, and a time zone indication. HP strongly
	recommends using the Z time zone indication, which indicates Greenwich Mean
	Time.

118 Plug-in implemented server functionality reference

Image 118

HP UX Identity Security Software Distributed numeric assignment plug-in, Generalized time syntax plug-in, Plug-in Name

Contents

HP-UX Directory Server Version Page Table of Contents Table of Contents Table of Contents Nsssl3ciphers 3.33.4 Nsslapd-state Nsslapd-backend 113 Nsslapd-pluginEnabled Password Storage SchemesSchema reload plug-in Nsslapd-idl-switch NsMaxResponseDelay Cn=userRoot, cn=ldbm database, cn=plugins, cn=configCn=ldbm database, cn=plugins, cn=config NsMaxTestResponseDelay 169 173 189 215 Finding and executing command-line scripts 215239 247 243257 Page Directory Server configuration Directory Server configurationUsing Directory Server command-line utilities Directory Server instance file reference Using Directory Server command-line scripts Introduction Overview of the Directory Server configuration Ldif and schema configuration files Directory Server Ldif configuration files Configuration of plug-in functionality How the server configuration is organizedConfiguration attributes Directory Server Ldif configuration files Configuration of databases Accessing and modifying server configurationAccess control for configuration entries Configuration of indexes Modifying configuration entries using Ldap Changing configuration attributesWhere Core server configuration attributes reference Configuration changes requiring server restart 1 cn=config Nsslapd-accesslog Access log Nsslapd-accesslog-logbuffering Log buffering Nsslapd-accesslog-level Access log levelNsslapd-accesslog-list List of access log files Attribute values for enabling or disabling access logging Valid Values Nsslapd-accesslog-logging-enabled Access log enable loggingDefault Value Syntax Directory String Example Valid Range Disk space allowed to the access log is unlimited in size EntryDN Cn=config Valid RangeSyntaxDirectoryString Example Syntax DirectoryString Example Nsslapd-accesslog-logrotationtime Access log rotation time Nsslapd-accesslog-maxlogsize Access log maximum log size Nsslapd-accesslog-mode Access log file permission SyntaxInteger Example Nsslapd-attribute-name-exceptions ValidRange Through Default Value 600 Syntax Integer ExampleDefault Value Off Syntax DirectoryString Example Nsslapd-auditlog Audit log Provides a list of audit log files Nsslapd-auditlog-listAttribute values for enabling or disabling audit logging EntryDN Turns audit logging on and off Nsslapd-auditlog-logging-enabled Audit log enable loggingEntry DN Cn=config Valid Values Disk space allowed to the audit log is unlimited in size Valid Range Through Default Value Syntax Integer Example Nsslapd-auditlog-logrotationsynchour Syntax Integer Example Nsslapd-auditlog-logrotationsyncmin Nsslapd-auditlog-logrotationtime Audit log rotation timeTime between audit log file rotation is unlimited Nsslapd-auditlog-mode Audit log file permission Nsslapd-auditlog-maxlogsize Audit log maximum log sizeNone Read only Execute only Nsslapd-certmap-basedn Certificate map search base Write access to the server user IDNsslapd-certdir Certificate and key database directory Write only Read and write Write and execute Nsslapd-conntablesize Nsslapd-configThis read-only attribute is the config DN Nsslapd-counters Default Value Off Core server configuration reference Nsslapd-ds4-compatible-schemaDefault Value Syntax DirectoryString Example Nsslapd-csnlogging Nsslapd-errorlog-level Error log level Nsslapd-errorlog Error logAttribute values for enabling or disabling error logging Nsslapd-errorlog-list This read-only attribute provides a list of error log files Nsslapd-errorlog-logging-enabled Enable error logging Turns error logging on and off Disk space allowed to the error log is unlimited in size Nsslapd-errorlog-logrotationtime Error log rotation time Time between error log file rotation is unlimited Nsslapd-errorlog-maxlogsize Maximum error log size Nsslapd-idletimeout Default idle timeout Nsslapd-errorlog-mode Error log file permissionNsslapd-groupevalnestlevel Nsslapd-instancedir Instance directory Nsslapd-ioblocktimeout IO block time outDefault Value Syntax Integer Example Nsslapd-idletimeout Nsslapd-lastmod Track modification time Nsslapd-ldapifilepath Ldapi socket file path Nsslapd-ldapilisten Enable Ldapi socketNsslapd-listenhost Listen to IP address Nsslapd-localuser Local user Default Value SyntaxDirectoryString ExampleNsslapd-localhost Local host Nsslapd-lockdir Server lock file directory Nsslapd-maxbersize Maximum message size Nsslapd-maxdescriptors Maximum file descriptors Nsslapd-maxsasliosize Maximum Sasl packet size Nsslapd-nagle Nsslapd-maxthreadsperconn Maximum threads per connectionThis attribute value is specified in bytes Nsslapd-plugin Nsslapd-outbound-ldap-io-timeoutDefault Value Core server configuration reference Nsslapd-port Port number Nsslapd-referral Referral Nsslapd-readonly Read onlyBut the request is for this entry Nsslapd-referralmode Referral mode Nsslapd-reservedescriptors Reserved file descriptors Nsslapd-return-exact-case Return exact case Nsslapd-rewrite-rfc1274 Default Value Syntax Nsslapd-rootpw Root passwordNsslapd-rootdn Manager DN Nsslapd-rootpwstoragescheme Root password storage scheme Nsslapd-saslpath Nsslapd-schemacheck Schema checking Nsslapd-schemadir Nsslapd-securelistenhost Nsslapd-schemareplaceNsslapd-securePort Encrypted port number Nsslapd-security Security Nsslapd-sizelimit Size limit Nsslapd-threadnumber Thread number Default Value Syntax Integer Example Nsslapd-threadnumberNsslapd-timelimit Time limit Nsslapd-tmpdir PasswordChange Password changeIndicates whether users may change their passwords Nsslapd-versionstring PasswordCheckSyntax Check password syntax PasswordExp Password expiration PasswordInHistory Number of passwords to remember PasswordGraceLimit Password expirationPasswordHistory Password history Default Value Syntax Integer Example PasswordGraceLimit PasswordLockout Account lockout PasswordIsGlobalPolicy Password policy and replicationPasswordLockoutDuration Lockout duration PasswordMaxRepeats Password syntax PasswordMaxAge Password maximum agePasswordMaxFailure Maximum password failures Default Value Syntax Integer Example PasswordMaxFailure PasswordMinAge Password minimum age PasswordMin8Bit Password syntaxDefault Value Syntax Integer Example PasswordMinAge PasswordMinDigits Password syntax PasswordMinAlphas Password syntaxPasswordMinCategories Password syntax PasswordMinLength Password minimum length PasswordMinSpecials Password syntax PasswordMinLowers Password syntaxPasswordMinTokenLength Password syntax PasswordMustChange Password must change PasswordMinUppers Password syntaxPasswordStorageScheme Password storage scheme PasswordUnlock Unlock account PasswordWarning Send warning 2 cn=changelog5,cn=config Nsslapd-changelogdir Nsslapd-changelogmaxage Max changelog age 3 cn=encryption,cn=configNssslsessiontimeout Nsslapd-changelogmaxentries Max changelog records Nssslclientauth Means disallow certificate-based authenticationDefault Value Off Syntax DirectoryString Example Nsssl2 off NsSSL2 Suffix configuration attributes under cn=suffixName 4 cn=features,cn=config5 cn=mapping tree,cn=config Nsssl3ciphers Determines how the suffix handles operations Nsslapd-stateNsslapd-backend To requests made by client applications NsDS5ReplicaBindDN NsDS5FlagsNsDS5ReplicaChangeCount NsDS5ReplicaLegacyConsumer NsDS5ReplicaPurgeDelayNsDS5ReplicaId NsDS5ReplicaName NsDS5ReplicaRoot NsDS5ReplicaReferralNsDS5ReplicaTombstonePurgeInterval NsDS5ReplicaReapActive NsDS5ReplicaTypeNsState 8.1 cn NsDS5ReplConflictDescription NsDS5ReplicaBindMethod NsDS5ReplicaBusyWaitTime NsDS5ReplicaCredentials SchemaNsDS5ReplicaChangesSentSinceStartup NsDS5ReplicaHost NsDS5ReplicaLastInitStatus NsDS5ReplicaLastInitEndNsDS5ReplicaLastInitStart Time NsDS5ReplicaLastUpdateStatus NsDS5ReplicaLastUpdateEndNsDS5ReplicaLastUpdateStart NsDS5ReplicaPort Default Value SyntaxInteger ExamplensDS5ReplicaPort389 NsDS5ReplicaPriority NsDS5BeginReplicaRefresh NsDS5ReplicaSessionPauseTime Valid Range Default Value SyntaxDirectoryString Example NsDS5ReplicaTimeoutNsDS5ReplicatedAttributeList NsDS5ReplicaUpdateSchedule NsDS5ReplicaUpdateInProgressNsDS5ReplicaTransportInfo NsDS50ruv NsDS5ReplicaLastUpdateEndSunday Nsds7DirectoryReplicaSubtree Nsds7NewWinGroupSyncEnabledNsds7NewWinUserSyncEnabled Nsds7DirsyncCookie Nsds7WindowsReplicaSubtree 10 cn=monitorNsds7WindowsDomain WinSyncInterval Greenwich Mean Time For exampleConnection table This is the number of completed operations This attribute sets whether Snmp is enabled 12 cn=SNMP,cn=configNssnmpenabled 11 cn=replication Nssnmpcontact NssnmporganizationNssnmplocation Nssnmpdescription Nssnmpmasterport Snmp statistic attributesNssnmpmasterhost Snmp statistic attributes 14 cn=tasks,cn=config Snmp statistic attributes Task invocation attributes for entries under cn=tasks Entry DN 14.2 cn=import,cn=tasks,cn=config Default Value Syntax DirectoryString Example Ttl NsFilename file1.ldif NsFilename file2.ldif Default Value Syntax Integer Example NsImportChunkSize 14.3 cn=export,cn=tasks,cn=config Valid Values Any DN Core server configuration reference Syntax Case-insensitive string Example NsExportReplica true Default Value Syntax DN, multi-valued ExampleSyntax Case-insensitive string Example NsUseOneFile true Syntax Case-insensitive string Example NsPrintKey false Syntax Case-insensitive string Example NsNoWrap false 14.4 cn=backup,cn=tasks,cn=configSyntax Case-insensitive string Example NsUseId2Entry true Syntax Case-insensitive string Example NsDumpUniqId true 14.5 cn=restore,cn=tasks,cn=config 14.6 cn=index,cn=tasks,cn=config Syntax Case-exact string Example 14.7 cn=schema reload task,cn=tasks,cn=config NsIndexAttribute attributeindex1,index2 14.8 cn=memberof task,cn=tasks,cn=config 15 cn=uniqueid generator,cn=config 112 1 7-bit check plug-in Server plug-in functionality referenceServer plug-in functionality reference ACL preoperation plug-in ACL plug-inAttribute uniqueness plug-in Binary syntax plug-in Boolean syntax plug-in Case exact string syntax plug-in Plug-in Name Chaining Database DN of Configuration EntryDescription Syntax for handling DNs Configurable Options Case ignore string syntax plug-in Distinguished name syntax plug-in Class of service plug-inCountry string syntax plug-in Dependencies None Performance Related Details of distributed numeric assignment plug-in Distributed numeric assignment plug-inGeneralized time syntax plug-in Plug-in Name Http client plug-in Internationalization plug-in Legacy replication plug-in Jpeg syntax plug-inLdbm database plug-in Information Further Information Multi-master replication plug-in MemberOf plug-inDetails of MemberOf plug-in Octet string syntax plug-in Password Storage SchemesOID syntax plug-in Password storage plugins Postal address string syntax plug-in PTA plug-in Referential integrity postoperation plug-in Both presence and equality Retro Changelog plug-inRoles plug-in Applications Details of schema reload plug-in Schema reload plug-inSpace insensitive string syntax plug-in Views plug-in Telephone syntax plug-inURI syntax plug-in Resource Locators Nsslapd-pluginPath List of attributes common to all plug-insAccount policy plug-in This attribute specifies the full path to the plug-in Nsslapd-pluginType Nsslapd-pluginEnabledNsslapd-pluginInitfunc Nsslapd-pluginId Nsslapd-pluginVendor Attributes allowed by certain plug-insNsslapd-pluginVersion Nsslapd-pluginDescription Nsslapd-plugin-depends-on-type Nsslapd-pluginLoadGlobalNsslapd-plugin-depends-on-named Database plug-in attributes NsLookthroughLimit Nsslapd-cache-autosize Nsslapd-cache-autosize-split Nsslapd-db-checkpoint-interval Nsslapd-dbcachesizePlatforms Nsslapd-db-debug Default Value Database plug-in attributesNsslapd-db-circular-logging Nsslapd-db-durable-transactions Nsslapd-db-home-directory Nsslapd-db-idl-divisor Nsslapd-db-logbuf-size Automatically adjusted to the minimum valueNsslapd-db-logdirectory Nsslapd-db-page-size Valid Range Bytes to 64 kilobytes Default ValueNsslapd-db-logfile-size Nsslapd-db-private-import-mem Nsslapd-db-spin-count Nsslapd-db-transaction-batch-val Nsslapd-db-verbose Nsslapd-db-trickle-percentageNsslapd-dbncache Nsslapd-directory Nsslapd-idl-switchNsslapd-exclude-from-export Nsslapd-import-cachesize Nsslapd-idlistscanlimitNsslapd-import-cache-autosize Nsslapd-mode No access for other usersDefault Value 600 Database plug-in attributes Memory to importCache Nsslapd-search-use-vlv-index Nsslapd-search-bypass-filter-testNsslapd-serial-lock Nsslapd-cachesize Nsslapd-cachememsize Nsslapd-require-index Nsslapd-readonlyNsslapd-suffix Database plug-in attributes NsSystemIndex 5.1 cnThis attribute provides the name of the attribute to index NsIndexType NsMatchingRule NsSubStrBegin Indexed attribute representing a subentry NsSubStrEnd NsSubStrMiddle Encrypted attributes under the cn=config node NsActiveChainingComponents Database link plug-in attributes chaining attributesNsEncryptionAlgorithm Database link plug-in attributes chaining attributes NsMaxTestResponseDelay NsMaxResponseDelayNspossiblechainingcomponents NsAbandonedSearchCheckInterval NsTransmittedControlsNsBindConnectionsLimit NsBindRetryLimit NsBindTimeoutDefault Value Syntax Integer Example NsCheckLocalACI NsConnectionLife NsConcurrentBindLimitNsConcurrentOperationsLimit NsOperationConnectionsLimit NsReferralOnScopedSearch NsProxiedAuthorizationNsSizeLimit NsTimeLimit NsBindMechanism NsMultiplexorBindDN NsFarmServerURLValid Values Empty Nshoplimit Encryption schemaNsMultiplexorCredentials NsUseStartTLS Retro changelog plug-in attributes Nsslapd-changelogdir DnaFilter Distributed numeric assignment plug-in attributesNsslapd-changelogmaxage Max changelog age DnaMagicRegen DnaNextRange DnaMaxValueDnaNextValue DnaPrefix DnaRangeRequestTimeoutDefault Value Syntax Integer Example DnaNextValue Bit systems DnaSharedCfgDN DnaScopeDnaThreshold Memberofattr MemberOf plug-in attributesDnaType Memberofgroupattr Account policy plug-in attributes Overview of Directory Server files Backup filesConfiguration files Database files Used internally by the database and should not be moved Setup-ds-admin.plscript is runAt setup for example, dc=example,dc=com Deleted, or modified in any way Log files Ldif filesLock files PID files Tools Scripts Access log reference Access logging levels Connection number Default access logging contentExample 5-1 Example access log File descriptor Operation number Error numberSlot number Method type Elapsed time Number of entriesLdap request type VLV-related entries Unindexed search indicatorLdap response type Search scope Abandon message Extended operation OIDChange sequence number LDAPv3 extended operations supported by Directory Server Message ID Access log content for additional access logging levelsSasl multi-stage bind logging Connection description Common connection codesOptions description Error log levels Error log referenceError log logging levels Common connection codes Error log content Error log levels Error log content for other log levels Example 5-3 Error log excerpt Example 5-4 Replication error log entry Into pending list Timestamp Pluginname message Timestamp function message Example 5-7 Access control summary logging Example 5-6 Config file processing log entryAudit log reference Audit log does not have any other log level to set Example 5-8 Audit log contentLdap result codes Ldap result codes Referral Ldap Adminlimitexceeded LdapLdap result codes Ldap Command-line utilities quick reference Finding and executing command-line utilitiesUsing special characters Commonly-used command-line utilities Commonly-used ldapsearch options LdapsearchLdapsearch syntax Ldapsearch syntax Commonly-used ldapsearch options Commonly-used ldapsearch options Persistent search optionsLdapsearch SSL options Persistent search options Ldapsearch Sasl options Additional SSL ldapsearch options Sasl options Description of CRAM-MD5 mechanism options Do not permit mechanisms susceptible to active attacks Do not permit mechanisms that allow anonymous accessDescription of CRAM-MD5 mechanism options Require forward secrecy Maxbufsize Required Mech=DIGEST-MD5 Gives the Sasl Mechanism Description of DIGEST-MD5 Sasl mechanism optionsFollowing UID. For example Description of Gssapi Sasl mechanism options Additional ldapsearch options10 Additional ldapsearch options 10 Additional ldapsearch options Commonly-used ldapmodify options LdapmodifyLdapmodify syntax 11 Commonly-used ldapmodify options 11 Commonly-used ldapmodify options Ldapmodify SSL options12 ldapmodify SSL options 12 ldapmodify SSL options Ldapmodify Sasl options13 Sasl options Additional ldapmodify options Ldapdelete14 Additional ldapmodify options Ldapdelete SSL options Ldapdelete syntaxCommonly-used ldapdelete options 15 Commonly-used ldapdelete options 16 ldapdelete SSL options Ldapdelete Sasl options17 Sasl options Ldappasswd syntax LdappasswdAdditional ldapdelete options 18 Additional ldapdelete options 19 ldappasswd-specific options Ldappasswd-specific optionsGeneral ldappasswd options 20 General ldappasswd options Ldappasswd Sasl options 20 General ldappasswd options 21 Sasl options Ldappasswd examplesSix values Ldif Example 6-2 Directory Manager generating a users passwordExample 6-3 User changing his own password Ldif Ldif syntax Ldif command has the following formatDbscan Ldif options 23 Common options Dbscan optionsDbscan examples 24 Entry file options Example 6-14 Dumping the index file uid.db4 with raw mode Example 6-8 Displaying VLV index file contentsExample 6-13 Displaying the changelog file contents Example 6-7 Dumping the entry file Saveconfig Finding and executing command-line scriptsCommand-line scripts quick reference Shell scripts in /opt/dirsrv/slapd-instancename Scripts in /opt/dirsrv/bin Shell scriptsPerl scripts in /opt/dirsrv/slapd-instancename This section covers the following scripts Syntax 1 bak2db Restores a database from backupCl-dump Dumps and decodes the changelog Bak2db options Options Dbverify Checks for corrupt databasesCl-dump options Dbverify options 4 db2bak Creates a backup of a database 5 db2ldif Exports database contents to Ldif Reindex cn and givenname in the database instance userRoot 6 db2index Reindexes database index filesLdif2db Import Db2index options Ldif2db options Pwdhash Prints encrypted passwordsLdif2ldap Performs import operation over Ldap 10 ldif2ldap options 11 pwdhash options Monitor Retrieves monitoring informationRepl-monitor Monitors replication status Syntax monitor Hostportbinddnbindpwdbindcert Saveconfig Saves Administration Server configuration Restoreconfig Restores Administration Server configurationRestart-slapd Restarts the Directory Server Suffix2instance Maps a suffix to a backend name Start-slapd Starts the Directory ServerStop-slapd Stops the Directory Server Vlvindex Creates virtual list view indexes Perl scripts 1 bak2db.pl Restores a database from backupRestores a database from a backup Options Either the -nor the -soption must be specified Creates a backup of the database 3 db2bak.pl Creates a backup of a database19 cl-dump.pl command options Cl-dump.pl Dumps and decodes the changelog 5 db2ldif.pl Exports database contents to Ldif 4 db2index.pl Creates and generates indexes Fixup-memberof.pl Regenerate memberOf attributes 22 db2ldif.pl options 23 fixup-memberof.pl options Ldif2db.pl Import24 ldif2db.pl options Logconv.pl Log converter 25 Information extracted from access logs24 ldif2db.pl options 26 logconv.pl options 27 logconv.pl options to display occurrences Ns-accountstatus.pl Establishes account status28 ns-accountstatus.pl options Activates an entry or group of entries Ns-activate.pl Activates an entry or group of entriesNs-inactivate.pl Inactivates an entry or group of entries 29 ns-activate.pl options Shows in-progress status of replication Repl-monitor.pl Monitors replication status31 ns-newpwdpolicy.pl options 32 repl-monitor.pl options Where Schemadirectory script uses the default schema directory Schema-reload.pl Reload schema files dynamically33 schema-reload.pl options Verify-db.pl Check for corrupt databases 34 verify-db.pl option Command, then it uses the default database directoryUsage information Information to collect before contacting HP How to contact HP technical supportContacting HP HP authorized resellers HP-UX Directory Server documentation set Related informationSupport and other resources HP-UX documentation set Troubleshooting resourcesTypographic conventions This document uses the following typographical conventions TIP Overview of ns-slapd Finding and executing the ns-slapd command-line utilitiesExports the contents of the database to Ldif Utilities for exporting databases db2ldif Imports Ldif files to the database Utilities for restoring and backing up databases ldif2dbTable A-1 db2ldif options Table A-2 ldif2db options Utilities for restoring and backing up databases db2archive Utilities for restoring and backing up databases archive2dbUtilities for creating and regenerating indexes db2index Table A-5 db2index options Glossary 247 Bind rule Glossary CoS definition 249 GSS-API Ldap 251 NIS Proxy 253 Sasl Superuser 255 256 Statistics for monitoring and optimizing directory Symbols257 Suffix and replication configuration entries Read-only monitoring configuration entries 259 Index Database link plug-in configuration attributes 261 Distributed numeric assignment plug-in configuration Ldap 263 NsDS5ReplicaChangesSentSinceStartup attribute 265 Page 267 Index 269 Index 271