2.3.3.5 nsssl3ciphers

This multi-valued attribute specifies the set of encryption ciphers the Directory Server uses during SSL communications. For more information on the ciphers supported by the Directory Server, see the "Managing SSL" chapter in the HP-UX Directory Server administrator guide.

Parameter

Description

Entry DN

cn=encryption,cn=config

 

 

Valid Values

For SSLv3:

 

• rsa_null_md5

 

• rsa_rc4_128_md5

 

• rsa_rc4_40_md5

 

• rsa_rc2_40_md5

 

• rsa_des_sha

 

• rsa_fips_des_sha

 

• rsa_3des_sha

 

• rsa_fips_3des_sha

 

For TLS:

 

• tls_rsa_export1024_with_rc4_56_sha

 

• tls_rsa_export1024_with_des_cbc_sha

 

 

Default Value

 

 

 

Syntax

DirectoryString

 

Use the plus (+) symbol to enable or minus (-) symbol to disable, followed by the ciphers.

 

Blank spaces are not allowed in the list of ciphers.

 

To enable all ciphers (except rsa_null_md5, which must be specifically called) specify

 

+all.

 

 

Example

nsslapd-SSL3ciphers: +RSA_NULL_MD5,+RC4_56_SHA,-RC4_56_SHA

 

 

For more information, see the "Managing SSL" chapter in the HP-UX Directory Server administrator guide

2.3.4 cn=features,cn=config

There are no relevant attributes for this entry. This entry is only used as a parent container entry. See the documentation on the child entries for more information.

2.3.5cn=mapping tree,cn=config

•Configuration attributes for suffixes, replication, and Windows synchronization are stored under cn=mapping tree,cn=config. Configuration attributes related to suffixes are found under the suffix subentry cn=suffix, cn=mapping tree,cn=config.

For example, a suffix is the root entry in the directory tree, such as dc=example,dc=com.

•Replication configuration attributes are stored under cn=replica, cn=suffix, cn=mapping tree,cn=config.

•Replication agreement attributes are stored under cn=replicationAgreementName, cn=replica, cn=suffix,cn=mapping tree,cn=config.

•Windows synchronization agreement attributes are stored under cn=syncAgreementName, cn=replica, cn=suffix,cn=mapping tree,cn=config.

2.3.6Suffix configuration attributes under cn="suffixName"

Suffix configuration attributes are stored under the cn=suffix entry. The cn=suffix entry is an instance of the nsMappingTree object class which inherits from the extensibleObject

2.3 Core server configuration attributes reference

75