Jpeg syntax plug-in | HP UX Identity Security Software manual

Plug-in parameter	Description
Performance Related	Do not modify the configuration of this plug-in. HP recommends leaving this plug-in
Information	running at all times.
Further Information	See the "Internationalization" appendix and the section on "Searching an
	Internationalized Directory" in the "Finding Directory Entries" appendix in the HP-UX
	Directory Server administrator guide.
3.1.18 JPEG syntax plug-in
Plug-in parameter	Description
Plug-in Name	JPEG Syntax Plug-in
DN of Configuration Entry	cn=JPEG Syntax,cn=plugins,cn=config
Description	Syntax for JPEG data.
Configurable Options	on or off
Default Setting	on
Configurable Arguments	None
Dependencies	None
Performance Related	Do not modify the configuration of this plug-in. HP recommends leaving this plug-in
Information	running at all times.
Further Information

3.1.19 ldbm database plug-in

Plug-in parameter	Description
Plug-in Name	ldbm database Plug-in
DN of Configuration Entry	cn=ldbm database, cn=plugins, cn=config
Description	Implements local databases
Configurable Options
Default Setting	on
Configurable Arguments	None
Dependencies	None
Performance Related	See “Database plug-in attributes” for further information on database configuration.
Information
Further Information	See the "Configuring Directory Databases" chapter in the HP-UX Directory Server
	administrator guide.

3.1.20 Legacy replication plug-in

Plug-in parameter	Description
Plug-in Name	Legacy Replication Plug-in
DN of Configuration Entry	cn=Legacy Replication plug-in, cn=plugins, cn=config
Description	Enables a current version Directory Server to be a consumer of a 4.x supplier
Configurable Options	on or off

120 Plug-in implemented server functionality reference

Image 120

HP UX Identity Security Software manual Jpeg syntax plug-in, Ldbm database plug-in, Legacy replication plug-in

Contents

HP-UX Directory Server Version Page Table of Contents Table of Contents Table of Contents 3.3 3.4Nsssl3ciphers Nsslapd-state Nsslapd-backend 113 Password Storage Schemes Schema reload plug-inNsslapd-pluginEnabled Nsslapd-idl-switch Cn=userRoot, cn=ldbm database, cn=plugins, cn=config Cn=ldbm database, cn=plugins, cn=configNsMaxResponseDelay NsMaxTestResponseDelay 169 173 189 Finding and executing command-line scripts 215 215239 243 247257 Page Directory Server configuration Using Directory Server command-line utilitiesDirectory Server configuration Directory Server instance file reference Using Directory Server command-line scripts Introduction Overview of the Directory Server configuration Ldif and schema configuration files Directory Server Ldif configuration files How the server configuration is organized Configuration attributesConfiguration of plug-in functionality Directory Server Ldif configuration files Accessing and modifying server configuration Access control for configuration entriesConfiguration of databases Configuration of indexes Changing configuration attributes Modifying configuration entries using LdapWhere Core server configuration attributes reference Configuration changes requiring server restart 1 cn=config Nsslapd-accesslog Access log Nsslapd-accesslog-level Access log level Nsslapd-accesslog-list List of access log filesNsslapd-accesslog-logbuffering Log buffering Attribute values for enabling or disabling access logging Nsslapd-accesslog-logging-enabled Access log enable logging Default Value Syntax Directory String ExampleValid Values Valid Range EntryDN Cn=config Valid Range Disk space allowed to the access log is unlimited in sizeSyntaxDirectoryString Example Syntax DirectoryString Example Nsslapd-accesslog-logrotationtime Access log rotation time Nsslapd-accesslog-maxlogsize Access log maximum log size Nsslapd-accesslog-mode Access log file permission SyntaxInteger Example ValidRange Through Default Value 600 Syntax Integer Example Default Value Off Syntax DirectoryString ExampleNsslapd-attribute-name-exceptions Nsslapd-auditlog Audit log Nsslapd-auditlog-list Attribute values for enabling or disabling audit loggingProvides a list of audit log files EntryDN Nsslapd-auditlog-logging-enabled Audit log enable logging Entry DN Cn=config Valid ValuesTurns audit logging on and off Disk space allowed to the audit log is unlimited in size Valid Range Through Default Value Syntax Integer Example Nsslapd-auditlog-logrotationsynchour Nsslapd-auditlog-logrotationtime Audit log rotation time Syntax Integer Example Nsslapd-auditlog-logrotationsyncminTime between audit log file rotation is unlimited Nsslapd-auditlog-maxlogsize Audit log maximum log size Nsslapd-auditlog-mode Audit log file permissionNone Read only Execute only Write access to the server user ID Nsslapd-certdir Certificate and key database directoryNsslapd-certmap-basedn Certificate map search base Write only Read and write Write and execute Nsslapd-config This read-only attribute is the config DNNsslapd-conntablesize Nsslapd-counters Nsslapd-ds4-compatible-schema Default Value Syntax DirectoryString ExampleDefault Value Off Core server configuration reference Nsslapd-csnlogging Nsslapd-errorlog Error log Nsslapd-errorlog-level Error log levelAttribute values for enabling or disabling error logging Nsslapd-errorlog-list This read-only attribute provides a list of error log files Nsslapd-errorlog-logging-enabled Enable error logging Turns error logging on and off Disk space allowed to the error log is unlimited in size Nsslapd-errorlog-logrotationtime Error log rotation time Time between error log file rotation is unlimited Nsslapd-errorlog-maxlogsize Maximum error log size Nsslapd-errorlog-mode Error log file permission Nsslapd-idletimeout Default idle timeoutNsslapd-groupevalnestlevel Nsslapd-ioblocktimeout IO block time out Default Value Syntax Integer Example Nsslapd-idletimeoutNsslapd-instancedir Instance directory Nsslapd-lastmod Track modification time Nsslapd-ldapilisten Enable Ldapi socket Nsslapd-ldapifilepath Ldapi socket file pathNsslapd-listenhost Listen to IP address Default Value SyntaxDirectoryString Example Nsslapd-localhost Local hostNsslapd-localuser Local user Nsslapd-lockdir Server lock file directory Nsslapd-maxbersize Maximum message size Nsslapd-maxdescriptors Maximum file descriptors Nsslapd-maxsasliosize Maximum Sasl packet size Nsslapd-maxthreadsperconn Maximum threads per connection Nsslapd-nagleThis attribute value is specified in bytes Nsslapd-outbound-ldap-io-timeout Default Value Core server configuration referenceNsslapd-plugin Nsslapd-port Port number Nsslapd-readonly Read only Nsslapd-referral ReferralBut the request is for this entry Nsslapd-referralmode Referral mode Nsslapd-reservedescriptors Reserved file descriptors Nsslapd-return-exact-case Return exact case Nsslapd-rewrite-rfc1274 Nsslapd-rootpw Root password Default Value SyntaxNsslapd-rootdn Manager DN Nsslapd-rootpwstoragescheme Root password storage scheme Nsslapd-saslpath Nsslapd-schemacheck Schema checking Nsslapd-schemadir Nsslapd-schemareplace Nsslapd-securelistenhostNsslapd-securePort Encrypted port number Nsslapd-security Security Nsslapd-sizelimit Size limit Default Value Syntax Integer Example Nsslapd-threadnumber Nsslapd-threadnumber Thread numberNsslapd-timelimit Time limit PasswordChange Password change Indicates whether users may change their passwordsNsslapd-tmpdir Nsslapd-versionstring PasswordCheckSyntax Check password syntax PasswordExp Password expiration PasswordGraceLimit Password expiration PasswordHistory Password historyPasswordInHistory Number of passwords to remember Default Value Syntax Integer Example PasswordGraceLimit PasswordIsGlobalPolicy Password policy and replication PasswordLockout Account lockoutPasswordLockoutDuration Lockout duration PasswordMaxAge Password maximum age PasswordMaxFailure Maximum password failuresPasswordMaxRepeats Password syntax Default Value Syntax Integer Example PasswordMaxFailure PasswordMin8Bit Password syntax PasswordMinAge Password minimum ageDefault Value Syntax Integer Example PasswordMinAge PasswordMinAlphas Password syntax PasswordMinCategories Password syntaxPasswordMinDigits Password syntax PasswordMinLength Password minimum length PasswordMinLowers Password syntax PasswordMinSpecials Password syntaxPasswordMinTokenLength Password syntax PasswordMinUppers Password syntax PasswordMustChange Password must changePasswordStorageScheme Password storage scheme PasswordUnlock Unlock account PasswordWarning Send warning 2 cn=changelog5,cn=config Nsslapd-changelogdir 3 cn=encryption,cn=config NssslsessiontimeoutNsslapd-changelogmaxage Max changelog age Nsslapd-changelogmaxentries Max changelog records Means disallow certificate-based authentication Default Value Off Syntax DirectoryString Example Nsssl2 offNssslclientauth NsSSL2 4 cn=features,cn=config 5 cn=mapping tree,cn=configSuffix configuration attributes under cn=suffixName Nsssl3ciphers Nsslapd-state Nsslapd-backendDetermines how the suffix handles operations To requests made by client applications NsDS5Flags NsDS5ReplicaBindDNNsDS5ReplicaChangeCount NsDS5ReplicaPurgeDelay NsDS5ReplicaIdNsDS5ReplicaLegacyConsumer NsDS5ReplicaName NsDS5ReplicaReferral NsDS5ReplicaRootNsDS5ReplicaTombstonePurgeInterval NsDS5ReplicaType NsDS5ReplicaReapActiveNsState NsDS5ReplConflict 8.1 cnDescription NsDS5ReplicaBindMethod NsDS5ReplicaBusyWaitTime Schema NsDS5ReplicaChangesSentSinceStartupNsDS5ReplicaCredentials NsDS5ReplicaHost NsDS5ReplicaLastInitEnd NsDS5ReplicaLastInitStartNsDS5ReplicaLastInitStatus Time NsDS5ReplicaLastUpdateEnd NsDS5ReplicaLastUpdateStartNsDS5ReplicaLastUpdateStatus NsDS5ReplicaPort Default Value SyntaxInteger ExamplensDS5ReplicaPort389 NsDS5ReplicaPriority NsDS5BeginReplicaRefresh NsDS5ReplicaSessionPauseTime NsDS5ReplicaTimeout Valid Range Default Value SyntaxDirectoryString ExampleNsDS5ReplicatedAttributeList NsDS5ReplicaUpdateInProgress NsDS5ReplicaUpdateScheduleNsDS5ReplicaTransportInfo NsDS5ReplicaLastUpdateEnd NsDS50ruvSunday Nsds7NewWinGroupSyncEnabled Nsds7NewWinUserSyncEnabledNsds7DirectoryReplicaSubtree Nsds7DirsyncCookie 10 cn=monitor Nsds7WindowsDomainNsds7WindowsReplicaSubtree WinSyncInterval For example Connection tableGreenwich Mean Time This is the number of completed operations 12 cn=SNMP,cn=config NssnmpenabledThis attribute sets whether Snmp is enabled 11 cn=replication Nssnmporganization NssnmplocationNssnmpcontact Nssnmpdescription Snmp statistic attributes NssnmpmasterhostNssnmpmasterport Snmp statistic attributes 14 cn=tasks,cn=config Snmp statistic attributes Task invocation attributes for entries under cn=tasks Entry DN 14.2 cn=import,cn=tasks,cn=config Default Value Syntax DirectoryString Example Ttl NsFilename file1.ldif NsFilename file2.ldif Default Value Syntax Integer Example NsImportChunkSize 14.3 cn=export,cn=tasks,cn=config Valid Values Any DN Core server configuration reference Default Value Syntax DN, multi-valued Example Syntax Case-insensitive string Example NsUseOneFile trueSyntax Case-insensitive string Example NsExportReplica true Syntax Case-insensitive string Example NsPrintKey false 14.4 cn=backup,cn=tasks,cn=config Syntax Case-insensitive string Example NsUseId2Entry trueSyntax Case-insensitive string Example NsNoWrap false Syntax Case-insensitive string Example NsDumpUniqId true 14.5 cn=restore,cn=tasks,cn=config 14.6 cn=index,cn=tasks,cn=config Syntax Case-exact string Example 14.7 cn=schema reload task,cn=tasks,cn=config NsIndexAttribute attributeindex1,index2 14.8 cn=memberof task,cn=tasks,cn=config 15 cn=uniqueid generator,cn=config 112 Server plug-in functionality reference 1 7-bit check plug-inServer plug-in functionality reference ACL plug-in ACL preoperation plug-inAttribute uniqueness plug-in Binary syntax plug-in Boolean syntax plug-in Plug-in Name Chaining Database DN of Configuration Entry Description Syntax for handling DNs Configurable OptionsCase exact string syntax plug-in Case ignore string syntax plug-in Class of service plug-in Country string syntax plug-inDistinguished name syntax plug-in Dependencies None Performance Related Distributed numeric assignment plug-in Generalized time syntax plug-inDetails of distributed numeric assignment plug-in Plug-in Name Http client plug-in Internationalization plug-in Jpeg syntax plug-in Ldbm database plug-inLegacy replication plug-in Information Further Information MemberOf plug-in Multi-master replication plug-inDetails of MemberOf plug-in Password Storage Schemes Octet string syntax plug-inOID syntax plug-in Password storage plugins Postal address string syntax plug-in PTA plug-in Referential integrity postoperation plug-in Retro Changelog plug-in Roles plug-inBoth presence and equality Applications Schema reload plug-in Details of schema reload plug-inSpace insensitive string syntax plug-in Telephone syntax plug-in URI syntax plug-inViews plug-in Resource Locators List of attributes common to all plug-ins Account policy plug-inNsslapd-pluginPath This attribute specifies the full path to the plug-in Nsslapd-pluginEnabled Nsslapd-pluginInitfuncNsslapd-pluginType Nsslapd-pluginId Attributes allowed by certain plug-ins Nsslapd-pluginVersionNsslapd-pluginVendor Nsslapd-pluginDescription Nsslapd-pluginLoadGlobal Nsslapd-plugin-depends-on-typeNsslapd-plugin-depends-on-named Database plug-in attributes NsLookthroughLimit Nsslapd-cache-autosize Nsslapd-cache-autosize-split Nsslapd-dbcachesize Nsslapd-db-checkpoint-intervalPlatforms Default Value Database plug-in attributes Nsslapd-db-circular-loggingNsslapd-db-debug Nsslapd-db-durable-transactions Nsslapd-db-home-directory Nsslapd-db-idl-divisor Automatically adjusted to the minimum value Nsslapd-db-logbuf-sizeNsslapd-db-logdirectory Valid Range Bytes to 64 kilobytes Default Value Nsslapd-db-logfile-sizeNsslapd-db-page-size Nsslapd-db-private-import-mem Nsslapd-db-spin-count Nsslapd-db-transaction-batch-val Nsslapd-db-trickle-percentage Nsslapd-db-verboseNsslapd-dbncache Nsslapd-idl-switch Nsslapd-directoryNsslapd-exclude-from-export Nsslapd-idlistscanlimit Nsslapd-import-cachesizeNsslapd-import-cache-autosize No access for other users Default Value 600 Database plug-in attributesNsslapd-mode Memory to importCache Nsslapd-search-bypass-filter-test Nsslapd-search-use-vlv-indexNsslapd-serial-lock Nsslapd-cachesize Nsslapd-cachememsize Nsslapd-readonly Nsslapd-require-indexNsslapd-suffix Database plug-in attributes 5.1 cn NsSystemIndexThis attribute provides the name of the attribute to index NsIndexType NsMatchingRule NsSubStrBegin Indexed attribute representing a subentry NsSubStrEnd NsSubStrMiddle Encrypted attributes under the cn=config node Database link plug-in attributes chaining attributes NsEncryptionAlgorithmNsActiveChainingComponents Database link plug-in attributes chaining attributes NsMaxResponseDelay NsMaxTestResponseDelayNspossiblechainingcomponents NsTransmittedControls NsAbandonedSearchCheckIntervalNsBindConnectionsLimit NsBindTimeout Default Value Syntax Integer ExampleNsBindRetryLimit NsCheckLocalACI NsConcurrentBindLimit NsConcurrentOperationsLimitNsConnectionLife NsOperationConnectionsLimit NsProxiedAuthorization NsReferralOnScopedSearchNsSizeLimit NsTimeLimit NsBindMechanism NsFarmServerURL NsMultiplexorBindDNValid Values Empty Encryption schema NsMultiplexorCredentialsNshoplimit NsUseStartTLS Retro changelog plug-in attributes Nsslapd-changelogdir Distributed numeric assignment plug-in attributes Nsslapd-changelogmaxage Max changelog ageDnaFilter DnaMagicRegen DnaMaxValue DnaNextRangeDnaNextValue DnaRangeRequestTimeout Default Value Syntax Integer Example DnaNextValueDnaPrefix Bit systems DnaScope DnaSharedCfgDNDnaThreshold MemberOf plug-in attributes DnaTypeMemberofattr Memberofgroupattr Account policy plug-in attributes Backup files Configuration filesOverview of Directory Server files Database files Setup-ds-admin.plscript is run At setup for example, dc=example,dc=comUsed internally by the database and should not be moved Deleted, or modified in any way Ldif files Lock filesLog files PID files Tools Scripts Access log reference Access logging levels Default access logging content Example 5-1 Example access logConnection number File descriptor Error number Slot numberOperation number Method type Number of entries Elapsed timeLdap request type Unindexed search indicator Ldap response typeVLV-related entries Search scope Extended operation OID Change sequence numberAbandon message LDAPv3 extended operations supported by Directory Server Access log content for additional access logging levels Message IDSasl multi-stage bind logging Common connection codes Connection descriptionOptions description Error log reference Error log logging levelsError log levels Common connection codes Error log content Error log levels Error log content for other log levels Example 5-3 Error log excerpt Example 5-4 Replication error log entry Into pending list Timestamp Pluginname message Timestamp function message Example 5-6 Config file processing log entry Example 5-7 Access control summary loggingAudit log reference Example 5-8 Audit log content Ldap result codesAudit log does not have any other log level to set Ldap result codes Adminlimitexceeded Ldap Ldap result codesReferral Ldap Ldap Finding and executing command-line utilities Using special charactersCommand-line utilities quick reference Commonly-used command-line utilities Ldapsearch Ldapsearch syntaxCommonly-used ldapsearch options Ldapsearch syntax Commonly-used ldapsearch options Persistent search options Ldapsearch SSL optionsCommonly-used ldapsearch options Persistent search options Ldapsearch Sasl options Additional SSL ldapsearch options Sasl options Description of CRAM-MD5 mechanism options Do not permit mechanisms that allow anonymous access Description of CRAM-MD5 mechanism optionsDo not permit mechanisms susceptible to active attacks Require forward secrecy Maxbufsize Description of DIGEST-MD5 Sasl mechanism options Required Mech=DIGEST-MD5 Gives the Sasl MechanismFollowing UID. For example Additional ldapsearch options Description of Gssapi Sasl mechanism options10 Additional ldapsearch options 10 Additional ldapsearch options Ldapmodify Ldapmodify syntaxCommonly-used ldapmodify options 11 Commonly-used ldapmodify options Ldapmodify SSL options 11 Commonly-used ldapmodify options12 ldapmodify SSL options Ldapmodify Sasl options 12 ldapmodify SSL options13 Sasl options Ldapdelete Additional ldapmodify options14 Additional ldapmodify options Ldapdelete syntax Commonly-used ldapdelete optionsLdapdelete SSL options 15 Commonly-used ldapdelete options Ldapdelete Sasl options 16 ldapdelete SSL options17 Sasl options Ldappasswd Additional ldapdelete optionsLdappasswd syntax 18 Additional ldapdelete options Ldappasswd-specific options General ldappasswd options19 ldappasswd-specific options 20 General ldappasswd options Ldappasswd Sasl options 20 General ldappasswd options Ldappasswd examples 21 Sasl optionsSix values Example 6-2 Directory Manager generating a users password Example 6-3 User changing his own passwordLdif Ldif Ldif command has the following format DbscanLdif syntax Ldif options Dbscan options Dbscan examples23 Common options 24 Entry file options Example 6-8 Displaying VLV index file contents Example 6-13 Displaying the changelog file contentsExample 6-14 Dumping the index file uid.db4 with raw mode Example 6-7 Dumping the entry file Finding and executing command-line scripts Command-line scripts quick referenceSaveconfig Shell scripts in /opt/dirsrv/slapd-instancename Shell scripts Perl scripts in /opt/dirsrv/slapd-instancenameScripts in /opt/dirsrv/bin This section covers the following scripts 1 bak2db Restores a database from backup Cl-dump Dumps and decodes the changelogSyntax Bak2db options Dbverify Checks for corrupt databases Cl-dump optionsOptions Dbverify options 4 db2bak Creates a backup of a database 5 db2ldif Exports database contents to Ldif 6 db2index Reindexes database index files Ldif2db ImportReindex cn and givenname in the database instance userRoot Db2index options Pwdhash Prints encrypted passwords Ldif2ldap Performs import operation over LdapLdif2db options 10 ldif2ldap options Monitor Retrieves monitoring information Repl-monitor Monitors replication status11 pwdhash options Syntax monitor Hostportbinddnbindpwdbindcert Restoreconfig Restores Administration Server configuration Saveconfig Saves Administration Server configurationRestart-slapd Restarts the Directory Server Start-slapd Starts the Directory Server Stop-slapd Stops the Directory ServerSuffix2instance Maps a suffix to a backend name Vlvindex Creates virtual list view indexes 1 bak2db.pl Restores a database from backup Restores a database from a backupPerl scripts Options Either the -nor the -soption must be specified 3 db2bak.pl Creates a backup of a database 19 cl-dump.pl command optionsCreates a backup of the database Cl-dump.pl Dumps and decodes the changelog 5 db2ldif.pl Exports database contents to Ldif 4 db2index.pl Creates and generates indexes Fixup-memberof.pl Regenerate memberOf attributes 22 db2ldif.pl options Ldif2db.pl Import 23 fixup-memberof.pl options24 ldif2db.pl options 25 Information extracted from access logs Logconv.pl Log converter24 ldif2db.pl options 26 logconv.pl options Ns-accountstatus.pl Establishes account status 27 logconv.pl options to display occurrences28 ns-accountstatus.pl options Ns-activate.pl Activates an entry or group of entries Ns-inactivate.pl Inactivates an entry or group of entriesActivates an entry or group of entries 29 ns-activate.pl options Repl-monitor.pl Monitors replication status 31 ns-newpwdpolicy.pl optionsShows in-progress status of replication 32 repl-monitor.pl options Where Schema-reload.pl Reload schema files dynamically 33 schema-reload.pl optionsSchemadirectory script uses the default schema directory Verify-db.pl Check for corrupt databases Command, then it uses the default database directory 34 verify-db.pl optionUsage information How to contact HP technical support Contacting HPInformation to collect before contacting HP HP authorized resellers Related information HP-UX Directory Server documentation setSupport and other resources Troubleshooting resources Typographic conventionsHP-UX documentation set This document uses the following typographical conventions TIP Finding and executing the ns-slapd command-line utilities Exports the contents of the database to LdifOverview of ns-slapd Utilities for exporting databases db2ldif Utilities for restoring and backing up databases ldif2db Table A-1 db2ldif optionsImports Ldif files to the database Table A-2 ldif2db options Utilities for restoring and backing up databases archive2db Utilities for restoring and backing up databases db2archiveUtilities for creating and regenerating indexes db2index Table A-5 db2index options Glossary 247 Bind rule Glossary CoS definition 249 GSS-API Ldap 251 NIS Proxy 253 Sasl Superuser 255 256 Symbols Statistics for monitoring and optimizing directory257 Suffix and replication configuration entries Read-only monitoring configuration entries 259 Index Database link plug-in configuration attributes 261 Distributed numeric assignment plug-in configuration Ldap 263 NsDS5ReplicaChangesSentSinceStartup attribute 265 Page 267 Index 269 Index 271