Skip Headers
Oracle® Fusion Middleware Man Page Reference for Oracle Directory Server Enterprise Edition
11g Release 1 (

Part Number E28967-01
Go to Documentation Home
Go to Table of Contents
Go to Index
Go to Feedback page
Contact Us

Go to previous page
Go to next page
PDF · Mobi · ePub


Maximum number of values per index key in an index list


Characteristic Value


INTEGER or inherited

Default Value

4000 or inherited

Is readable


Is modifiable


Is multi-valued


This property defines the maximum number of values per index key that the server maintains in an index list. It can be set for an entire server instance, for an entire suffix, and for an individual attribute type. You can also set individual thresholds for equality, presence, and substring indexes.

When you do not set specific threshold values, the values at each level are inherited from the more global values. Thus the default suffix threshold value is inherited from the setting for the server instance; the default attribute type value from the setting for the suffix. In addition to inheritance of default settings, this property handles settings as follows.


The threshold value is inherited from the more global setting.


The threshold value is rounded up to 2000.


The setting is used as a guaranteed minimum threshold. Because of internal mechanisms, the real value can be slightly more than the specified value.

After you modify this property for an entire server instance or an entire suffix, import all data from LDIF to reinitialize all indexes.

If you modify this property only for a specific attribute, it is usually most expedient to use the dsconf reindex command on the attribute for which you changed the threshold. The dsconf reindex command runs a directory task to reindex the attribute while the server instance is online.

The system indexes cannot have the all-ids-threshold property modified for a single attribute type, but for the whole index.

Syntax Values

Syntax values shown in lower case or partly in lower case are literal values.

Those shown in upper case are syntax types, defined as follows:


A valid attribute type name such as cn or objectClass.


true or false.


A valid distinguished name such as ou=People,dc=example,dc=com.


A duration specified in months (M), weeks (w), days (d), hours (h), minutes (m), seconds (s), and miliseconds (ms), or some combination with multiple specifiers. For example, you can specify one week as 1w, 7d, 168h, 10080m, or 604800s. You can also specify one week as 1w0d0h0m0s.

DURATION properties typically do not each support all duration specifiers (Mwdhms). Examine the output of dsconf help-properties for the property to determine which duration specifiers are supported.


A valid e-mail address.


An IP address or host name.


A positive integer value between 0 and the maximum supported integer value in the system address space. On 32-bit systems, 2147483647. On 64-bit systems, 9223372036854775807.


An interval value of the form hhmm-hhmm 0123456, where the first element specifies the starting hour, the next element the finishing hour in 24-hour time format, from 0000-2359, and the second specifies days, starting with Sunday (0) to Saturday (6).


An IP address or range of address in one of the following formats:

  • IP address in dotted decimal form.

  • IP address and bits, in the form of network number/mask bits.

  • IP address and quad, in the form of a pair of dotted decimal quads.

  • All address. A catch-all for clients that are note placed into other, higher priority groups.

  • This address is for groups to which initial membership is not considered. For example, for groups that clients switch to after their initial bind.

  • IP address of the local host.


A valid LDAP URL as specified by RFC 2255 (


A memory size specified in gigabytes (G), megabytes (M),kilobytes (k), or bytes (b). Unlike DURATION properties, MEMORY_SIZE properties cannot combine multiple specifiers. However, MEMORY_SIZE properties allow decimal values, for example, 1.5M.


A valid cn (common name).


A three-digit, octal file permissions specifier. The first digit specifies permissions for the server user ID, the second for the server group ID, the last for other users. Each digit consists of a bitmask defining read (4), write (2), execute (1), or no access (0) permissions, thus 640 specifies read-write access for the server user, read-only access for other users of the server group, and no access for other users.


The full path to the file from which the bind password should be read.


A valid, absolute file system path.


A DirectoryString value, as specified by RFC 2252 (


An SSL cipher supported by the server. See the Reference for a list of supported ciphers.


An SSL protocol supported by the server. See the Reference for a list of supported protocols.


A time of the form hhmm in 24-hour format, where hh stands for hours and mm stands for minutes.


See attributes(5) for descriptions of the following attributes:




Stability Level


See Also

dsconf(1M), index(5DSCONF), server(5DSCONF), suffix(5DSCONF)