Example 2 LDAP Caching Daemon Configuration File

#

#directory server and port, active ldap connections cached

#by the daemon, max worker threads started

#

directory: host.xyz.com 1

searchbase: "o=XYZCompany" 2

port:389 3

connections: 6 4

max_threads: 64 5

#

#max entries in cache, and number of seconds before entries

#expire in the cache

#

pw_cachesize: 2000 6

pw_expirecache: 120

gr_cachesize: 100

gr_expirecache: 600

machine_dn: "cn=Directory Manager" 7 machine_pass: "password"

#

# the objectClass name of a password entry

pw_oclass: posixAccount 8

#name mappings for password attribute fields

pw_username: uid 9

pw_password: userPassword 10

pw_uid: uidNumber

pw_gid: gidNumber pw_quota:

pw_comment: description

pw_gecos: gecos

pw_homedir: homedirectory

pw_shell: loginshell

# the objectClass name of a group entry

gr_oclass: posixGroup 11

#name mappings for group attribute fields

gr_oclass: unixGroup 12

gr_name: cn

gr_password: userPassword

gr_gid: gidNumber

gr_members: MemberUID

1Host name of the LDAP directory server to be used for user authentication.

2The root of the branch in the directory server's database where user information is stored.

3 The default directory server port; this must match the port you are using for the directory server.

4 Maximum number of open connections to the directory server maintained by the ldapcd caching daemon.

5 Maximum number of threads maintained by the ldapcd caching daemon. Each thread handles one connection to a local program. Allowing a higher number of threads may enable better response from the LDAP caching daemon, but requires more memory. If you are running a service that requires a large number of connections (for example, a mail service), set the maximum number of threads to 64 or greater (if your system has sufficient memory).

68 User Authentication

Page 68
Image 68
HP UX Internet Express Software manual Example 2 Ldap Caching Daemon Configuration File