HP UX Identity Security Software 2.3.3 cn=encryption,cn=config

2.3.2.2 nsslapd-changelogmaxage (Max changelog age)

This attribute sets the maximum age of any entry in the changelog. The changelog contains a record for each directory modification and is used when synchronizing consumer servers. Each record contains a timestamp. Any record with a timestamp that is older than the value specified in this attribute is removed. If this attribute is absent, there is no age limit on changelog records. For information on the changelog, see “nsslapd-changelogdir”.

The server has to be restarted for changes to this attribute to go into effect.

Parameter	Description
Entry DN	cn=changelog5,cn=config
Valid Range	0 (meaning that entries are not removed according to their age) to maximum 32-bit integer
	(2147483647)
Default Value	0
Syntax	DirectoryString IntegerAgeID where AgeID is s for seconds, m for minutes, h for hours,
	d for days, and w for weeks
Example	nsslapd-changelogmaxage: 30d

2.3.2.3 nsslapd-changelogmaxentries (Max changelog records)

This attribute sets the maximum number of records the changelog may contain. If this attribute is absent, there is no maximum number of records the changelog can contain. For information on the changelog, see “nsslapd-changelogdir”.

The server has to be restarted for changes to this attribute to go into effect.

Parameter	Description
Entry DN	cn=changelog5,cn=config
Valid Range	0 (meaning that the only maximum limit is the disk size) to maximum 32-bit integer
	(2147483647)
Default Value	0
Syntax	Integer
Example	nsslapd-changelogmaxentries: 5000

2.3.3 cn=encryption,cn=config

Encryption related attributes are stored under the cn=encryption,cn=config entry. The cn=encryption,cn=config entry is an instance of the nsslapdEncryptionConfig object class.

2.3.3.1 nssslsessiontimeout

This attribute sets the lifetime duration of a TLS/SSL. The minimum timeout value is 5 seconds. If a smaller value is set, then it is automatically replaced by 5 seconds. A value greater than the maximum value in the valid range below is replaced by the maximum value in the range.

The server has to be restarted for changes to this attribute to go into effect.

Parameter	Description
Entry DN	cn=encryption,cn=config
Valid Range	5 seconds to 24 hours
Default Value	0, which means use the maximum value in the valid range above.

2.3 Core server configuration attributes reference 73