Configuration Parameters

The eDirectory configuration parameters are stored in the nds.conf file.

When configuration parameters are changed, ndsd needs to be restarted for the new value to take effect.

However, for some configuration parameters, ndsd need not be restarted. These parameters are listed below:

The following table provides a description of all the configuration parameters.

Parameter Description

n4u.nds.preferred-server

The host name of the machine that hosts the eDirectory service.

Default=null

n4u.base.tree-name

The tree name that Account Management uses. This is a mandatory parameter set by the Account Management installer. This parameter cannot be set or changed by the administrator.

n4u.base.dclient.use-udp

The Directory User Agent can use UDP in addition to TCP for communicating with eDirectory servers. This parameter enables the UDP transport.

Default=0
Range=0, 1

n4u.base.slp.max-wait

The Service Location Protocol (SLP) API calls timeout.

Default=30
Range=3 to 100

n4u.nds.advertise-life-time

eDirectory reregisters itself with the Directory Agent after this time period.

Default=3600
Range=1 to 65535

n4u.server.signature-level

Determines the level of enhanced security support. Increasing this value increases security, but decreases performance.

Default=1
Range=0 to3

n4u.nds.dibdir

The eDirectory directory information database.

Default=/var/nds/dib

This parameter is set during installation and cannot be modified later.

n4u.nds.server-guid

A globally unique identifier for eDirectory server. Default=null

n4u.nds.server-name

The name of the eDirectory Server.

Default=null

n4u.nds.bindery-context

The Bindery context string.

Default=null

n4u.nds.server-context

The context that the eDirectory server is added to. This parameter cannot be set or changed.

n4u.nds.external-reference-life-span

The number of hours unused external references are allowed to exist before being removed.

Default=192
Range=1 to 384

n4u.nds.inactivity-synchronization-interval

The interval (in minutes) after which full synchronization of the replicas is performed, following a period of no change to the information held in eDirectory on the server.

Default=60
Range=2 to 1440

n4u.nds.synchronization-restrictions

The Off value allows synchronization with any version of eDirectory. The On value restricts synchronization to version numbers you specify as parameters (for example, ON,420,421).

Default=Off

n4u.nds.janitor-interval

The interval (in minutes) after which the eDirectory Janitor process is executed.

Default=2
Range=1 to 10080

n4u.nds.backlink-interval

The interval (in minutes) after which eDirectory backlink consistency is checked.

Default=780
Range=2 to 10080

n4u.nds.flatcleaning-interval

The interval (in minutes) after which the flatcleaner process automatically begins purging and deleting entries from the database.

Default=720
Range=1 to 720

n4u.nds.server-state-up-threshold

The server state up threshold, in minutes. This is the time after which eDirectory checks the server state before returning -625 errors.

Default=30
Range=1 to 720

n4u.nds.heartbeat-schema

The heartbeat base schema synchronization interval in minutes.

Default=240
Range=2 to 1440

n4u.nds.heartbeat-data

The heartbeat synchronization interval in minutes.

Default=60
Range=2 to 1440

n4u.nds.drl-interval

The interval (in minutes) after which eDirectory distributed reference link consistency is checked.

Default=780
Range=2 to 10080

n4u.server.tcp-port

The default port used if the port number is not specified in the n4u.server.interfaces parameter.

n4u.server.max-interfaces

This parameter specifies maximum number of interfaces that eDirectory will use. This value can range from 1 to 2048.Default value is 128.

n4u.server.max-openfiles

This parameter specifies the maximum number of file descriptors that eDirectory can use.

Default=maximum allowed by the administrator

n4u.ldap.lburp.transize

Number of records that are sent from the Novell Import/Export client to the LDAP server in a single LBURP packet. You can increase the transaction size to ensure that multiple add operations can be performed in a single request.

Default=25
Range=1 to 250

n4u.server.sid-caching

Enables SSL session ID caching. Refer to the SSL v3.0 RFC for more details about session ID caching in SSL.

n4u.server.max-threads

The maximum number of threads that will be started by the eDirectory server. This is the number of concurrent operations that can be done within the eDirectory server.

Default=64
Range=32 to 512

n4u.server.idle-threads

The maximum number of idle threads that are allowed in the eDirectory server.

Default=8
Range=1 to 128

n4u.nds.dofsync

Setting this parameter to 0 increases update performance significantly for large databases, but there is a risk of database corruption if the system crashes.

n4u.server.configdir

The eDirectory configuration files are placed here.

Default=/etc

n4u.server.vardir

The eDirectory and utilities log files are placed here.

Default=/var/nds

n4u.server.libdir

The eDirectory specific libraries are placed here in the nds-modules directory.

Default=/usr/lib

n4u.server.start-threads

Initial number of threads to be started up.

Default=8

http.server.interfaces

Comma-separated list of interfaces that HTTP server should use.

https.server.interfaces

Comma-separated list of interfaces that HTTPS should use.

http.server.request-io-buffer-size

Default IO buffer size.

http.server.request_timeout-seconds

Server request timeout.

http.server.keep-timeout-seconds

Number of seconds to wait for the next request from the same client on the same connection.

http.server.threads-per-processor

HTTP thread pool size per processor.

http.server.session-exp-seconds

Session expiration time in seconds.

http.server.sadmin-passwd

Session administrator password.

http.server.module-base

HTTP server webroot.

https.server.cached-cert-dn

HTTPS server cached certificate DN.

https.server.cached-server-dn

HTTPS server cached DN.

http.server.trace-level

Diagnostic trace level of HTTP server.

http.server.auth-req-tls

HTTP server authentication requires TLS.

http.server.clear-port

Server port for the HTTP protocol.

http.server.tls-port

Server port for the HTTPS protocol.