Oracle Fusion Middleware Administration Guide for Oracle Directory Server Enterprise Edition

Setting Resource Limits For Each Client Account

You can control search operation resource limits on the server for each client account. You set such limits in operational attributes on an account, and Directory Server then enforces them based on the account a client uses to bind to the directory.

The following limits can be set:

Note –

The Directory Manager can use unlimited resources by default.

The resource limits that you set on specific user accounts take precedence over the resource limits set in the server-wide configuration. This section provides information about setting resource limits for each account.

The examples given in this section set resource limits directly in the attributes of the entry. You can also set resource limits on account using the Class of Service (CoS) mechanism. The CoS mechanism generates computed attributes as an entry is retrieved for a client application. For more information about defining CoS, see Class of Service.

ProcedureTo Configure Search Limit

If you want to define the search limit that is used by the nsslapd process, refer to the following procedure:

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

  1. Use the dsconf get-server-prop command to read the resource limit server properties.

    $ dsconf get-server-prop -h host -p port look-through-limit search-size-limit \
     search-time-limit idle-timeout
    look-through-limit  :  5000  
    search-size-limit   :  2000  
    search-time-limit   :  3600
    idle-timeout        :  none

    The output shows that searches look through a maximum of 5000 entries, return a maximum of 2000 entries, and use a maximum of one hour (3600 seconds) of server time to process the search.

  2. Change the look-through limit.

    $ dsconf set-server-prop -h host -p port look-through-limit:integer

    where integer is the maximum number of entries examined for a search operation.

  3. Change the search size limit.

    $ dsconf set-server-prop -h host -p port search-size-limit:integer

    where integer is the maximum number of entries returned by a search operation.

  4. Change the search time limit.

    $ dsconf set-server-prop -h host -p port search-time-limit:integer

    where integer is the maximum time spent processing a search operation.

  5. Change the idle timeout.

    $ dsconf set-server-prop -h host -p port idle-timeout:integer

    where integer is the maximum time a client connection can remain idle before the connection is dropped.