ParameterDescription

SyntaxDirectoryString

Example

nsDS7NewWinUserSyncEnabled: on

2.3.9.5 nsds7WindowsDomain

This attribute sets the name of the Windows domain to which the Windows sync peer belongs.

Parameter

Description

Entry DN

cn=syncAgreementName, cn=replica, cn=suffixDN, cn=mapping tree, cn=config

 

 

Valid Values

Any valid domain name

 

 

Default Value

 

 

 

Syntax

DirectoryString

 

 

Example

nsDS7WinndowsDomain: DOMAINWORLD

 

 

2.3.9.6 nsds7WindowsReplicaSubtree

The suffix or DN of the Windows subtree that is being synchronized.

Parameter

Description

Entry DN

cn=syncAgreementName, cn=replica, cn=suffixDN, cn=mapping tree, cn=config

 

 

Valid Values

Any valid suffix or subsuffix

 

 

Default Value

 

 

 

Syntax

DirectoryString

 

 

Example

nsDS7WindowsReplicaSubtree: cn=Users, dc=domain, dc=com

 

 

2.3.9.7 winSyncInterval

This attribute sets how frequently, in seconds, the Directory Server polls the Windows sync peer to look for changes in the Active Directory entries. If this entry is not set, the Directory Server checks the Windows server every five (5) minutes, meaning the default value is 300 (300 seconds).

This value can be set lower to write Active Directory changes over to the Directory Server faster or raised if the directory searches are taking too long.

Parameter

Description

Entry DN

cn=syncAgreementName, cn=replica, cn=suffixDN, cn=mapping tree, cn=config

 

 

Valid Values

1 to the maximum 32-bit integer value (2147483647)

 

 

Default Value

300

 

 

Syntax

Integer

 

 

Example

winSyncInterval: 600

 

 

2.3.10 cn=monitor

Information used to monitor the server is stored under cn=monitor. This entry and its children are read-only; clients cannot directly modify them. The server updates this information automatically. This section describes the cn=monitor attributes. The only attribute that can be changed by a user to set access control is the aci attribute.

92 Core server configuration reference