service.admin.alarm

"yes"

Enable ("yes") or disable ("no") alarm notifications for administration tools.

local.store.

checkpoint.enable

"yes"

If "yes", start the csadmind database checkpoint thread.

service.admin.

dbcachesize

"8388608"

Maximum cache size (in bytes) for Berkeley Database for administration sessions. 

local.store.

deadlock.enable

"yes"

If "yes", start the csadmind database deadlock detection thread.

service.admin.

diskusage

"no"

If "yes", start the csadmind low disk space monitor thread.

service.admin.enable

"yes"

If "yes", start the csadmind service when starting all services and stop csadmind when stopping all services.

service.admin.

idletimeout

"120"

Number of seconds before timing out an HTTP connection in csadmind.

service.admin.

maxsessions

"100"

Maximum number of administration sessions allowed. 

service.admin.

maxthreads

"10"

Maximum number of running threads per administration session. 

service.admin.

numprocesses

N/A 

Maximum number of a concurrent administration processes allowed. 

service.admin.port

N/A 

**CAUTION** 

Set by the system. Do not change. 

service.admin.

resourcetimeout

"900"

Number of seconds before timing out an administration connection. 

service.admin.

serverresponse

"no"

If "yes", start the csadmind service response thread.

service.admin.

sessiondir.path

" "

Temporary directory for administration session requests. 

service.admin.

sessiontimeout

"1800"

Number of seconds before timing out an HTTP session in csadmind.

service.admin.

sleeptime

"2"

Number of seconds to wait between checking for started, stopped, or ready calendar service. 

service.admin.

starttime

"300"

Number of seconds to wait for any calendar service to start. 

service.admin.

stoptime

"300"

Number of seconds to wait for any calendar service to stop. 

service.admin.

stoptime.next

"60"

Number of seconds to wait between sending stop commands to any calendar service. 

service.dcroot

"o=internet"

Root suffix of the DC tree in the directory. 

service.

dnsresolveclient

"no"

If "yes", client IP addresses are checked against DNS if allowed HTTP access.

service.plaintext

loginpause

"0"

Number of seconds to delay after successfully authenticating a user using plain text passwords. 

service.http.admins

"calmaster"

Space separated list of user ID's with administration rights to this Calendar Server. 

service.http.

allowadminproxy

"yes"

If "yes", allow login via proxy.

service.http.

allowanonymouslogin

"yes"

If "yes", allow anonymous (no authentication) access. This is a special type of login that is allowed only specified, restricted access (usually read only access to public calendars).

service.http

.calendarhostname

"" (Null)

HTTP host for retrieving HTML documents. 

service.http.cookies

"yes"

Tells the server to whether or to support cookies. It must be set to "yes" to enable single sign-on.

service.http.

dbcachesize

"8388608"

Maximum cache size of Berkeley DB for HTTP sessions. 

service.http.

domainallowed

"" (Null)

If specified and not "", filter to allow access based on TCP domains. For example, "ALL:LOCAL.sesta.com" would allow local HTTP access to anyone in the sesta.com domain. Multiple filters are separated by CR-LF(line feed).

EXCEPT Operator 

You can use the EXCEPT operator to create exceptions to matching names or patterns when you have multiple entries in a list. For example, the expression: 

list1 EXCEPT list2

means that anything that matches list2 is matched, unless it also matches list2. 

For example: 

ALL: ALL EXCEPT isserver.siroe.com 

If this were a Deny filter, it would deny access to all services to all clients except those on the host machine, isserver.siroe.com. 

EXCEPT clauses can be nested. The expression: 

list1 EXCEPT list2 EXCEPT list3 

is evaluated as if it were 

list1 EXCEPT (list2 EXCEPT list3) 

service.http.

domainnotallowed

"" (Null)

If specified and not " ", filter to not allow access based on TCP domains. For example, "ALL:LOCAL.sesta.com" would deny HTTP access to anyone in the sesta.com domain. Multiple filters must be separated by CR-LF (line-feed).

EXCEPT Operator. For details about this operator, see the preceding entry, service.http.domainallowed.

service.http.

attachdir.path

"."

Directory location relative to local.queuedir (or an absolute path if specified) where imported files are temporarily stored.

service.http.

ipsecurity

"yes"

If "yes", all requests that reference an existing session are verified as originating from the same IP address. 

service.http.enable

"yes"

If "yes", start the cshttpd service when starting all services and stop cshttpd when stopping all services.

service.http.

idletimeout

"120"

Number of seconds before timing out an HTTP connection. 

service.http.

ldap.enable

"yes"

If "yes", LDAP connections for authentication and user preferences are created and maintained. 

service.http.listenaddr

"INADDR_ANY"

Specifies the TCP address that HTTP services will listen on for client requests. "INADDR_ANY" indicates any address.

service.http.logaccess

"no"

If "yes", HTTP connections to server are fully logged. 

service.http.

maxsessions

"5000"

Maximum number of HTTP sessions in cshttpd service.

service.http.

maxthreads

"20"

Maximum number of threads to service HTTP requests in cshttpd service.

service.http.

numprocesses

"1"

Maximum number of concurrently running HTTP service (cshttpd) processes that should run on a server.

For a server that has multiple CPU's, see 21.8 Using Load Balancing Across Multiple CPU's

service.http.port

"80"

Port for HTTP requests from Calendar Server users. 

service.http.

proxydomainallowed

""

If specified and not "", filter for allowing proxy login based on TCP domains. Same syntax as service.http.domainallowed.

service.http.

resourcetimeout

"900"

Number of seconds before timing out an HTTP session. 

service.http.

sessiondir.path

"http"

Temporary directory for HTTP sessions. 

service.http.sessiontimeout

"1800"

Number of seconds before timing out an HTTP session in cshttpd service.

service.http.sourceurl

" "

Directory relative to executable where all URL references to files are stored. 

service.http.tmpdir

Directory relative to executable where all URL references to files are stored. 

The default is: /var/opt/SUNWics5/tmp

service.http.uidir.path

"html"

Directory that contains the default calendar client. If allowing only WCAP access, set to "".

service.ldapmemcache

"no"

If "yes", use cache in LDAP SDK. 

service.ldapmemcachettl

"30"

If service.ldapmemcache is "yes", pass in this value to the LDAP SDK. This is the maximum number of seconds that an item can be cached. If 0, there is no limit to the amount of time that an item can be cached.

service.ldapmemcachesize

"131072"

If service.ldapmemcache is "yes", pass in this value to the LDAP SDK. This is the maximum amount of memory in bytes that the cache will consume. If 0, the cache has no size limit.

service.wcap.anonymous

.allowpubliccalendarwrite

"yes"

If "yes", allow anonymous users to write to publicly writable calendars. 

service.wcap.format

"text/calendar"

Specifies the default output format for commands currently applied only for freebusy. 

service.wcap.

freebusybegin

"30"

Specifies the default offset from the current time in days for get_freebusy for beginning of the range.

service.wcap.

freebusyend

"30"

Specifies the default offset from the current time in days for get_freebusy for end of the range.

service.wcap.freebusy.

redirecturl

““ 

For migration purposes, when migration is only partially done and calendars are split between the originating database and the Calendar Server target database. The URL of the originating database to look in, if a calendar is not found in the Calendar Server database. 

service.wcap.allow

createcalendars

"yes"

If "yes", allow calendars to be created.

service.wcap.allow

deletecalendars

"yes"

If "yes", allow calendars to be deleted.

service.wcap.allow

changepassword

"no"

If "yes", allows user passwords to be changed.

service.wcap.allow

publicwritablecalendars

"yes"

If "yes", allow users to have publicly writable calendars.

service.wcap.allow

setprefs.cn

"no"

If "yes", allow the set_userprefs.wcap attribute to modify the user preference cn (LDAP user's common name).

service.wcap.allow

setprefs.givenname

"no"

If "yes", allow the set_userprefs.wcap attribute to modify the user preference givenname (LDAP user's given name).

service.wcap.allow

setprefs.icsCalendar

"no"

If "yes", allow the set_userprefs.wcap attribute to modify the user preference icsCalendar (a user's default calendar identifier).

service.wcap.allow

setprefs.mail

"no"

If "yes", allow the set_userprefs.wcap attribute to modify the user preference mail (user's email address).

service.wcap.allowsetprefs.

preferredlanguage

"no"

If "yes", allow the set_userprefs.wcap attribute to modify the user preference preferredlanguage (LDAP user's preferred language).

service.wcap.allow

setprefs.sn

"no"

If "yes", allow the set_userprefs.wcap attribute to modify the user preference sn (LDAP user's surname).

service.wcap.allow

setprefs.nswccalid

"no"

If "yes", allow the set_userprefs.wcap attribute to modify the user preference nswccalid, which is the user's default calendar ID.

service.wcap.login.

calendar.publicread

"no"

If "yes", default user calendars are initially set to publicly readable and privately writable. If "no", default user calendars are initially set to privately readable and writable.

service.wcap.userprefs.

ldapproxyauth

"no"

If "yes", enables LDAP proxy authorization for get_userprefs.wcap command. If "no", anonymous LDAP search is performed.

service.wcap.validateowners

"no"

If "yes", the server must validate that each owner of a calendar exists in the directory (through LDAP or a CSAPI compatible user directory mechanism).

service.wcap.version

"3.0"

WCAP version.