To Configure Search Limit

If you want to define the search limit that is used by the nsslapd process, refer to the following procedure:

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

1. Use the dsconf get-server-prop command to read the resource limit server properties.

   $ dsconf get-server-prop -h host -p port look-through-limit search-size-limit \ search-time-limit idle-timeout look-through-limit : 5000 search-size-limit : 2000 search-time-limit : 3600 idle-timeout : none

   The output shows that searches look through a maximum of 5000 entries, return a maximum of 2000 entries, and use a maximum of one hour (3600 seconds) of server time to process the search.

2. Change the look-through limit.

   $ dsconf set-server-prop -h host -p port look-through-limit:integer

   where integer is the maximum number of entries examined for a search operation.

3. Change the search size limit.

   $ dsconf set-server-prop -h host -p port search-size-limit:integer

   where integer is the maximum number of entries returned by a search operation.

4. Change the search time limit.

   $ dsconf set-server-prop -h host -p port search-time-limit:integer

   where integer is the maximum time spent processing a search operation.

5. Change the idle timeout.

   $ dsconf set-server-prop -h host -p port idle-timeout:integer

   where integer is the maximum time a client connection can remain idle before the connection is dropped.