HP UX Identity Security Software SyntaxDirectoryString Example, EntryDN Cn=config Valid Range

ParameterDescription

SyntaxDirectoryString

Example nsslapd-accesslog-logging-enabled: off

For access logging to be enabled, this attribute must be switched to on, and the nsslapd-accesslogconfiguration attribute must have a valid path and parameter. Table 2-3lists the four possible combinations of values for these two configuration attributes and their outcome in terms of disabling or enabling of access logging.

Table 2-3 Attribute values for enabling or disabling access logging

Value of the
nsslapd-accesslog-logging-enabled	Value of the nsslapd-accesslog
attribute	attribute	Resulting logging state
on	empty string	Disabled
on	filename	Enabled
off	empty string	Disabled
off	filename	Disabled

2.3.1.8 nsslapd-accesslog-logmaxdiskspace (Access log maximum disk space)

This attribute specifies the maximum amount of disk space in megabytes that the access logs are allowed to consume. If this value is exceeded, the oldest access log is deleted.

When setting a maximum disk space, consider the total number of log files that can be created due to log file rotation. Also, remember that there are three different log files (access log, audit log, and error log) maintained by the Directory Server, each of which consumes disk space.

Compare these considerations to the total amount of disk space for the access log.

Parameter	Description
EntryDN	cn=config
Valid Range	-1 1 to the maximum 32-bit integer value (2147483647), where a value of -1 means that the
	disk space allowed to the access log is unlimited in size.
Default Value	500
Syntax	Integer
Example	nsslapd-accesslog-logmaxdiskspace: 200

2.3.1.9 nsslapd-accesslog-logminfreediskspace (Access log minimum free disk space)

This attribute sets the minimum allowed free disk space in megabytes. When the amount of free disk space falls below the value specified on this attribute, the oldest access logs are deleted until enough disk space is freed to satisfy this attribute.

Parameter	Description
EntryDN	cn=config
Valid Range	1 to the maximum 32-bit integer value (2147483647)
Default Value	5
Syntax	Integer
Example	nsslapd-accesslog-logminfreediskspace: 4

26 Core server configuration reference