HP UX Identity Security Software manual 4 cn=features,cn=config, 5 cn=mapping tree,cn=config

2.3.3.5 nsssl3ciphers

This multi-valued attribute specifies the set of encryption ciphers the Directory Server uses during SSL communications. For more information on the ciphers supported by the Directory Server, see the "Managing SSL" chapter in the HP-UX Directory Server administrator guide.

Parameter	Description
Entry DN	cn=encryption,cn=config
Valid Values	For SSLv3:
	• rsa_null_md5
	• rsa_rc4_128_md5
	• rsa_rc4_40_md5
	• rsa_rc2_40_md5
	• rsa_des_sha
	• rsa_fips_des_sha
	• rsa_3des_sha
	• rsa_fips_3des_sha
	For TLS:
	• tls_rsa_export1024_with_rc4_56_sha
	• tls_rsa_export1024_with_des_cbc_sha
Default Value
Syntax	DirectoryString
	Use the plus (+) symbol to enable or minus (-) symbol to disable, followed by the ciphers.
	Blank spaces are not allowed in the list of ciphers.
	To enable all ciphers (except rsa_null_md5, which must be specifically called) specify
	+all.
Example	nsslapd-SSL3ciphers: +RSA_NULL_MD5,+RC4_56_SHA,-RC4_56_SHA

For more information, see the "Managing SSL" chapter in the HP-UX Directory Server administrator guide

2.3.4 cn=features,cn=config

There are no relevant attributes for this entry. This entry is only used as a parent container entry. See the documentation on the child entries for more information.

2.3.5cn=mapping tree,cn=config

•Configuration attributes for suffixes, replication, and Windows synchronization are stored under cn=mapping tree,cn=config. Configuration attributes related to suffixes are found under the suffix subentry cn=suffix, cn=mapping tree,cn=config.

For example, a suffix is the root entry in the directory tree, such as dc=example,dc=com.

•Replication configuration attributes are stored under cn=replica, cn=suffix, cn=mapping tree,cn=config.

•Replication agreement attributes are stored under cn=replicationAgreementName, cn=replica, cn=suffix,cn=mapping tree,cn=config.

•Windows synchronization agreement attributes are stored under cn=syncAgreementName, cn=replica, cn=suffix,cn=mapping tree,cn=config.

2.3.6Suffix configuration attributes under cn="suffixName"

Suffix configuration attributes are stored under the cn=suffix entry. The cn=suffix entry is an instance of the nsMappingTree object class which inherits from the extensibleObject

2.3 Core server configuration attributes reference 75