Creating and Configuring a Resource Limits Policy

For an overview of resource limits policies, see Resource Limits Policies for Connection Handlers in Sun Java System Directory Server Enterprise Edition 6.3 Reference. For information about how to create and configure resource limits policies and to customize search limits, see the following procedures.

To Create a Resource Limits Policy

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

1. Create a resource limits policy.

   $ dpconf create-resource-limits-policy -h host -p port policy-name

   For information about how to modify the properties of a resource limits policy, see To Configure a Resource Limits Policy.

2. Associate the resource limits policy to a connection handler.

   $ dpconf set-connection-handler-prop -h host -p port connection-handler-name \ resource-limits-policy:policy-name

To Configure a Resource Limits Policy

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

1. View the properties of a resource limits policy.

   $ dpconf get-resource-limits-policy-prop -h host -p port policy-name

   The default properties of a resource limits policy are as follows:

   description : - max-client-connections : unlimited max-connections : unlimited max-simultaneous-operations-per-connection : unlimited max-total-operations-per-connection : unlimited minimum-search-filter-substring-length : unlimited referral-bind-policy : default referral-hop-limit : default referral-policy : default search-size-limit : unlimited search-time-limit : unlimited

2. Configure the resource limits policy by setting one or more of the properties that are listed in Step 1:

   $ dpconf set-resource-limits-policy-prop -h host -p port policy-name \ property:value [property:value ...]

To Customize Search Limits

Customized limits can be defined for search operations according to the search base and search scope. If the target DN and scope of a search operation matches the specified criteria, the maximum size of the search result is limited.

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

1. Create one or more custom search limits.

   $ dpconf create-custom-search-size-limit -h host -p port policy-name \ custom-search-limit-name [custom-search-limit-name ...]

2. Set the criteria for the custom search limit.

   $ dpconf set-custom-search-size-limit-prop -h host -p port policy-name \ custom-search-limit-name one-level-search-base-dn:value subtree-search-base-dn:value

3. Set the limit for the number of results that are returned when a search meets one of the criteria in Step 2.

   $ dpconf set-custom-search-size-limit-prop -h host -p port policy-name \ custom-search-limit-name search-size-limit:value

4. View the properties of a custom search limit.

   $ dpconf get-custom-search-size-limit-prop -h host -p port policy-name \ custom-search-limit-name

   The default properties of a custom search limit are as follows:

   one-level-search-base-dn : - search-size-limit : unlimited subtree-search-base-dn : -