Exit Print View

Sun OpenDS Standard Edition 2.2 Administration Guide

Get PDF Book Print View
 

Document Information

Before You Start

Starting and Stopping Your Server Instance

Configuring the Server Instance

Configuring the Proxy Components

Configuring Network Groups

Creating a Network Group

To Create a Network Group

Modifying Network Group Properties

Creating a Network Group Quality of Service Policy

To Modify a Network Group Quality of Service Policy

Configuring a Workflow

Listing Existing Workflows

Viewing Workflow Properties

Creating a Workflow

Configuring Workflow Elements

Listing Workflow Elements

Configuring an LDAP Proxy

Listing LDAP Proxy Elements

Listing LDAP Server Extensions

Listing Proxy Workflow Elements

Viewing LDAP Proxy Element Properties

Viewing LDAP Server Extension Properties

Viewing Advanced LDAP Server Extension Properties

Viewing Proxy Workflow Element

Adding an LDAP Proxy

Creating an LDAP Server Extension

Creating a Proxy LDAP Workflow Element

Modifying an LDAP Proxy

Modifying LDAP Server Extension Properties

Modifying LDAP Server Extension Advanced Properties

LDAP Data Source Monitoring Connection Properties

Modifying a Proxy LDAP Workflow Element Properties

Configuring Load Balancing

Configuring Load Balancing

Creating a Load Balancing Workflow Element

Creating a Load Balancing Algorithm

Creating the Load Balancing Routes

Modifying Load Balancing Properties

Modifying the Load Balancing Algorithm Type

Modifying the Load Balancing Route Properties

Setting Client Connection Affinity

Deleting Load Balancing Elements

Configuring Distribution

Configuring Distribution

Creating a Distribution Workflow Element

Creating a Distribution Algorithm

Creating a lexico or numeric Distribution Partition

Creating a dnpattern Distribution Partition

Managing Modify DN Requests

Deleting Distribution

Configuring the Global Index

Configuring Global Index Catalogs

To Create a Global Index Catalog Containing Global Indexes

To View Global Index Catalog Properties

Modifying the Properties of a Global Index Catalog

To View Global Index Properties

To Import Contents of a File into a Global Index Catalog

To Export Contents of a Global Index Catalog to a File

To Associate a Global Index Catalog to a Distribution

To Disassociate a Global Index Catalog From a Distribution

To Add a Global Index to a Global Index Catalog

To Remove a Global Index From a Global Index Catalog

Configuring Controls Required by the Global Index Catalog with Sun OpenDS Standard Edition

Replication of Global Index Catalogs

To Enable Global Index Catalog Replication

To Initialize Global Index Catalog Replication

To Disable Global Index Catalog Replication

To View the Status of a Replicated Global Index Catalog Configuration

Logging of Replication Activities

Lifecycle Examples for Replicated Global Index Catalogs

Configuring Security Between Clients and Servers

Configuring Security Between the Proxy and the Data Source

Configuring Servers With the Control Panel

Managing Directory Data

Replicating Directory Data

Controlling Access To Data

Managing Users and Groups

Monitoring Sun OpenDS Standard Edition

Improving Performance

Advanced Administration

Modifying LDAP Server Extension Advanced Properties

You can configure the following advanced properties:

pool-increment

The increment by which the size of a connection pool is increased or decreased. If the remote-ldap-server-ssl-policy property is set to user, two pools of connections are created and the incremental change in size of each pool is set to pool-increment.

The default value is 5 connections.

pool-initial-size

The initial size of a connection pool. This is the initial number of connections to be created when a pool is initialized. Note that pool-initial-size is also minimum size of a pool.

The default value is 10 connections.

If the remote-ldap-server-ssl-policy property is set to user, two pools of connections are created and the initial size, and minimum size, of each pool is set to pool-initial-size. Therefore there can initially be twice the total number of connections indicated in pool-initial-size. For details, see Modes of Secure Connection.

pool-max-size

The maximum size of a connection pool. This is the maximum number of connections that a pool can allocate. If the remote-ldap-server-ssl-policy property is set to user, two pools of connections are created and the maximum size of each pool is set to pool-max-size.

The default value is 1000 connections.

pool-max-write

The maximum number of write connections that a connection pool can allocate at the same time. This is an integer. This parameter is taken into account only if the pool-use-max-write parameter is set to true.

The default value is 0 connections.

pool-release-connection-interval

The time after which a connection is considered by the Sun OpenDS Standard Edition proxy to be unused if no traffic has been sent on it. This reduces the size of the pool of connections, if the pool has been previously increased. If the number of unused connections is greater than pool-increment, then the size of the pool is reduced by pool-increment. This means that unused connections are closed and are removed from the pool.

The default value is 300 000 milliseconds (5 minutes).

pool-use-max-write

If this boolean is set to true, the pool-max-write parameter is taken into account, otherwise it is not. By default, pool-use-max-write is set to false.

proxied-auth-use-v1

When using the proxy authorization control mode, the default version of the control is v2. To use an older version for compatibility reasons, set proxied-auth-use-v1 to true. By default, proxied-auth-use-v1 is set to false. For more information about controls, see Supported LDAP Controls in Sun OpenDS Standard Edition 2.2 Architectural Reference.

remote-ldap-server-read-timeout

The timeout for reads. If the timeout is reached before the remote LDAP server sends back a response, an error is returned by Sun OpenDS Standard Edition proxy to the client. By default, this value is 10 000 milliseconds.

saturation-precision

The saturation precision is used in calculating the saturation threshold. Since the saturation limit can vary as requests are sent and received, the saturation precision indicates the buffer before the saturation is taken into account. In other words, by default the saturation can vary by 5% before it is taken into account.

The monitoring properties are described in LDAP Data Source Monitoring Connection Properties.

The SSL properties are security features. For information on these properties, see Configuring Security Between the Proxy and the Data Source.

To modify the advanced LDAP server extension properties, use the set-extension-prop --advanced command.


Note - These advanced properties are set by default and typically are not modified.


An example of an advanced property that you may want to change is the pool-max-size. If you have a powerful remote LDAP server and you have configured your Sun OpenDS Standard Edition proxy so that it receives a maximum of requests, then you can increase the pool-max-size as follows:

$ dsconfig -h localhost -p 4444 -D "cn=Directory Manager" -w password -X -n \
  set-extension-prop --advanced \
  --extension-name DS-proxy5 \
  --set pool-max-size:500