Chapter 4   Messaging Server Configuration


This chapter lists the configuration parameters for the Messaging Server. These parameters can be set via the configutil command. For a full description and syntax of the configutil command, see "configutil".

For information about configuring the MTA, see Chapter 5 "MTA Configuration."

configutil Parameters

---

Table 4-1    configutil Parameters 

Parameter	Description
alarm.msgalarmnoticehost	Machine to which you send warning messages. If not set, localhost will be used. Default: localhost
alarm.msgalarmnoticeport	The SMTP port to which to connect when sending alarm messages. Default: 25
alarm.msgalarmnoticercpt	Recipient of alarm notice. Default: Postmaster@localhost
alarm.msgalarmnoticesender	Address of sender of alarm. Default: Postmaster@localhost
alarm.msgalarmnoticetemplate	Message template. %s in the template is replaced with the following (in order): sender, recipient, alarm description, alarm instance, alarm current value and alarm summary text
alarm.diskavail.msgalarmstatinterval	Interval in seconds between disk availability checks. Set to 0 to disable checks of disk usage. Default: 3600
alarm.diskavail.msgalarmthreshold	Percentage of disk space availability below which an alarm is sent. Default: 10
alarm.diskavail.msgalarmthresholddirection	Specifies whether the alarm is issued when disk space availability is below threshold (-1) or above it (1). Default: -1
alarm.diskavail.msgalarmwarninginterval	Interval in hours between subsequent repetition of disk availability alarms. Default: 24
alarm.diskavail.msgalarmdescription	Percentage mail partition diskspace available.
alarm.serverresponse.msgalarmdescription	Server response time in seconds.
alarm.serverresponse.msgalarmstatinterval	Checking interval (seconds). Set to 0 to disable checking of server response. Default: 600
alarm.serverresponse.msgalarmthreshold	If server response time in seconds exceeds this value, alarm issued. Default: 10
alarm.serverresponse.msgalarmthresholddirection	Specifies whether alarm is issued when server response time is greater than (1) or less than (-1) the threshold. Default: 1
alarm.serverresponse.msgalarmwarninginterval	Interval in hours between subsequent repetition of server response alarm. Default: 24
encryption.nscertfile	cert file location.
encryption.nskeyfile	key file location.
encryption.nsssl2	Default: no
encryption.nsssl2ciphers	Comma-delineated list of ciphers
encryption.nsssl3	Default: yes
encryption.nsssl3ciphers	Default: rsa_rc4_40_md5, rsa_rc2_40_md5, rsa_des_sha,rsa_rc4_128_md5, rsa_3des_sha
encryption.nsssl3sessiontimeout	Default: 0
encryption.nssslclientauth	Default: 0
encryption.nssslsessiontimeout	Default: 0
encryption.fortezza.nssslactivation	Default: off
encryption.rsa.nssslactivation	Default: on
encryption.rsa.nssslpersonalityssl	Default: Server-Cert
encryption.rsa.nsssltoken	Default: internal
gen.accounturl	Location of the server administration resource for end users. Default: http://%U@[Hostname]:[AdminPort]/bin/user/admin/bin/enduser
gen.configversion	Configuration version. Default: 4.0.
gen.filterurl	URL for incoming mail (server side) filter.
gen.folderurl	URL for personal folder management.
gen.installedlanguages	Default: en
gen.listurl	URL for mailing list management.
gen.newuserforms	Welcome message for new users.
gen.sitelanguage	Default language tag. Default: en.
local.cgiexeclist	List of pattern string used to match command to be executed.
local.dbstat.captureinterval	Interval to capture db statistics into counters (seconds). Default: 3600.
local.defdomain	Default domain - set by install.
local.enduseradmincred	Password for end user administrator.
local.enduseradmindn	User id for end user administrator.
local.hostname	DN of Local hostname.
local.imta.imta_tailor	Location of the imta_tailor file for this MTA instance.
local.imta.ldsearchtimeout	Specifies the LDAP search timeout when searching for users and groups. Default: -1 (no timeout)
local.imta.lookupandsync	Defines which type of entries should be synched when using the direct LDAP lookup module. Specify 1 for users (default), 2 for groups, or 3 for users and groups.
local.imta.lookupfallbackaddress	When using the direct LDAP lookup module, this parameter allows the last alias lookup to be skipped. Instead the recipient address is rewritten to a fixed address. This parameter is used in conjunction with a SEND_ACCESS mapping rule to return an error code.
local.imta.lookupmaxnbfailed	When using the direct LDAP lookup module, this parameter defines when the routing process stops performing unsuccessful LDAP searches (in processes). The default: no limit.
local.imta.hostnamealiases	When checking the mailhost or mailRoutingHosts attribute of an LDAP entry to see if it is local, the dirsync process uses the local.hostname parameter to do the comparison. In addition, a comma separated list of hostname aliases can be provided through the local.imta.hostnamealiases parameter. The dirsync process will then use all the hostnames provided in those 2 parameters to check if an entry is local.
local.imta.mailalises	List of comma-delineated LDAP attributes that override the default attributes. These attributes should be email addresses that can be routed. For example: if local.imta.mailaliases=mail,mailAlternateAddress,rfc822mailbox, rfc822mail alias, the MTA will consider these attributes when routing messages. Default: mailAlternateAddress
local.imta.schematag	Defines the types of LDAP entries that are supported by the MTA. Default: ims50.
local.imta.ugfilter	Sets the LDAP search filter that Dirsync uses when searching for users and groups. For example, if you want to consider only LDAP entries with the inetLocalMailRecipient and myispSubscriber objectclass, you would set this parameter to: local.imta.ugfilter=(&(objectClass=inetLocalMailRecipient) (objectClass=myispSubscriber)). The default filter is: objectClass=inetLocalMailRecipient. Note: In the case of an incremental dirsync, a timestamp filter will be added to this ugfilter. As a result, you will need to wrap your custom filter with parentheses. This parameter is not used when the MTA is configured in direct LDAP mode.
local.imta.statssamplesize	If set, this parameter tells dirsync to print out on the standard output a summary of the number of user and mailing list entries proceeded since the beginning as well as an average rate in entries/second. Users and mailing lists are counted whether or not they are successfully synchronized. Default: yes.
local.imta.reversenabled	Triggers the generation of the reverse database. How the reverse database is actually used is controlled by the USE_REVERSE_DATABASE option. Default: yes.
local.imta.vanityenabled	Controls whether or not vanity domains are enabled. Setting to yes enables vanity domain. If the variable does not exist, the MTA assumes that vanity domain is enabled. Default: yes. This parameter is used in dirsync mode only. See Appendix B, "MTA Direct LDAP Operation" in the iPlanet Messaging Server Administrator's Guide.
local.imta.catchallenabled	Controls whether or not catch all addresses (mail or mailAlternateAddress in the form @domain) are enabled. Default: yes.
local.imta.scope	Informs s dirsync which entries it should synchronize: Cache only user and mailing list entries for which the mailhost attribute is the local host: value = "local". Cache user and mailing list entries regardless of their mailhost attribute: value = "domains". This is the default value if the parameter is missing. Do not cache any domain, user, or mailing list: value = "nobody"
local.imta.ssrenabled	Triggers the generation of the server side rule database. How the SSR database is actually used is controlled by the ssr channel keyword. Default: yes
local.installeddir	Full pathname of software installation directory.
local.instancedir	Full pathname of server instance directory.
local.lastconfigfetch	Last configuration fetch timestamp.
local.ldapbasedn	Base DN.
local.ldapcachefile	Location of cached configuration.
local.ldaphost	LDAP server for SIE.
local.ldapisiedn	Installed software DN.
local.ldappoolrefreshinterval	Length of time before LDAP connections are automatically closed then re-established to the LDAP server. Also, length of elapsed time until the failover directory server reverts back to the primary directory server. Default: -1 (never refresh)
local.ldapport	LDAP port. Default: 389.
local.ldapsiecred	Server credential.
local.ldapsiedn	Server instance entry DN.
local.ldapusessl	Sets whether or not LDAP auth uses SSL. Default: no.
local.queuedir	Full pathname of spool directory.
local.report.reportercmd	Command to run in order to generate reports. Default: server_root/bin/msg/admin/bin/reporter.pl
local.report.runinterval	Interval for job generation process to sleep in between checking for jobs (seconds). Default: 3600.
local.report.counterlogfile.expirytime	Maximum time (in seconds) a logfile is kept. Default: 604800.
local.report.counterlogfile.interval	The frequency that the counter is captured in seconds. Default: 600.
local.report.counterlogfile.logdir	Directory path for log files.
local.report.counterlogfile.loglevel	Default: Notice.
local.report.counterlogfile.maxlogfiles	Maximum number of files. Default: 10.
local.report.counterlogfile.maxlogfilesize	Maximum size (bytes) of each log file. Default: 2097152.
local.report.counterlogfile.maxlogsize	Maximum size of all logfiles. Default: 20971520
local.report.counterlogfile.minfreediskspace	Minimum amount of free disk space (bytes) that must be available for logging. Default: 5242880.
local.report.counterlogfile.rollovertime	The frequency in which to rotate logfiles (in seconds). Default: 86400.
local.report.counterlogfile.separator	Field separator in counter logfile. Default: `\t'.
local.report.job.desc.sample	Description for report job sample.
local.report.job.range.sample	Time range of input data.
local.report.job.schedule.sample	The time to start reporting process.
local.report.job.target.sample	Location to send the report.
local.report.job.type.sample	Type of report for this job. Default: listmbox.
local.report.type.cmd.listmbox	Command to execute listmbox report type.
local.report.type.desc.listmbox	Description for listmbox report type.
local.rfc822header.fixcharset	Character set where improperly encoded 8-bit message headers are interpreted by Messenger Express.
local.rfc822header.fixlang	Specifies two-letter language ID where improperly encoded 8-bit message headers are interpreted by Messenger Express. This parameter must be used in conjunction with the fixcharset parameter.
local.servergid	Server groupid in UNIX. Default: nobody.
local.servername	Server name.
local.serverroot	Server root.
local.servertype	Server type. Default: msg.
local.serveruid	User id of server in UNIX. Default: msgsrv.
local.service.http.maxcollectmsglen	Maximum message size the server collects from a remote POP mailbox. If any message in the mailbox to be collect exceeds this size, the collection will halt when that message is encountered.
local.service.http.proxy	Enables the Messenger Express Multiplexor on a Messaging Server proxy machine (when set to 1). This specialized server acts as a single point of connection to Messenger Express (the HTTP access service) when managing multiple mail servers. Default: 0
local.service.http.rfc2231compliant	Enables WebMail's RFC-2231 encoder so that the attachment filename will be encoded in the method defined by RFC-2231.
local.service.http.smtpauthpassword	Password for end user AUTH SMTP user.
local.service.http.smtpauthuser	User id for end user AUTH SMTP user. This parameter allows someone using Messenger Express to receive the same authenticated SMTP messages that they would normally receive using Netscape Communicator. In order for this to work, the user ID and password given to the mshttpd must be a store administrator; they must exist in the store.admins list (for example, admin and admin). After setting these parameters, any mail received from a local user should have the word "Internal" appearing next to the "From:" header in the Message View window.
local.service.pab.alwaysusedefaulthost	Enables one PAB server to be used. Default: False
local.service.pab.attributelist	Add new attributes to a personal address book entry. With this parameter, you can create an attribute that does not already exist. Default: pabattrs.
local.service.pab.enabled	Enable or disable PAB feature. Default: 1
local.service.pab.ldapbasedn	Base DN for PAB searches. Default: o=pab
local.service.pab.ldapbinddn	Bind DN for PAB searches.
local.service.pab.ldaphost	Hostname where Directory Server for PAB resides.
local.service.pab.ldappasswd	Password for user specified by local.service.pab.ldapbinddn.
local.service.pab.ldapport	Port number of the PAB Directory Server.
local.service.pab.maxnumberofentries	Maximum number of entries a single PAB can store. Default: 500
local.service.pab.migrate415	Enables PAB migration when set to "on". The default value is "off".
local.store.expire.cleanonly	When set to yes, stored utility performs cleanup only. By default, stored performs both cleanup and expire. Affects stored -d process only; it does not affect the stored -1 option.
local.store.expire.workday	Defines the workday for expire and cleanup. This parameter takes an integer from 0 to 6 that specifies a day of the week. 0 specifies Sunday, 1 specifies Monday, 2 specifies Tuesday, and so on. If this parameter is set, expire and cleanup runs on the specified day only. Setting this parameter to -1 or a value larger than 6 disables expire and cleanup. If this parameter is not set, then the default is to run every day.
local.store.snapshotdirs	Number of separate snapshots to store on disk. Minimum is 2. Recommend enough to be sure you have a good database back by the time you figure out the current one is beyond repair. Default: 3
local.store.snapshotinterval	Interval of time between snapshots. Unit of time is in minutes. It is recommended that you perform this procedure at least once a day. Default: 0.
local.store.snapshotpath	Specifies the path in which to copy the mboxlist directory. Permissions are set for the message store owner. Snapshots will be placed in subdirectories.
local.store.deadlock.autodetect	Sets whether all or just one thread resolves deadlock. Default: no.
local.store.deadlock.checkinterval	Specifies the sleep length (in microseconds) before lock_detect is set again. Default: 1000.
local.supportedlanguages	Languages supported by server code.
local.tmpdir	Default value for service.http.spooldir.
local.ugldapbasedn	Root of the user/group configuration tree in the Directory Server.
local.ugldapbindcred	Password for the user/group administrator.
local.ugldapbinddn	DN of the user/group administrator.
local.ugldaphasplainpasswords	Sets whether the user/groups LDAP server is configured to store user passwords in plaintext and readable to the server. Default: no.
local.ugldaphost	LDAP server for user lookup.
local.ugldapport	LDAP port. Default: 389.
local.ugldapuselocal	Default: yes
local.ugldapusessl	Sets whether or not to use SSL to connect to LDAP server. Default: no.
local.webmail.sso.cookiedomain	Specifies the value to include in the domain field of any SSO cookie that is sent back to the client.
local.webmail.sso.enable	Performs all SSO functions, including accepting and verifying SSO cookies presented by the client when the login page is fetched. It returns an SSO cookie to the client for a successful login and responds to requests from other SSO partners to verify its own cookies. If set to zero, the server does not perform any SSO functions. The default is 0. This parameter takes an integer value.
local.webmail.sso.id	Specifies the application ID value when formatting SSO cookies set by the WebMail server. The default is NULL. This parameter takes a string value.
local.webmail.sso.prefix	Specifies the prefix value when formatting SSO cookies set by the WebMail server. Only SSO cookies with this prefix value are recognized by the server; all other SSO cookies are ignored. The default is NULL. This parameter takes a string value.
local.webmail.sso.singlesignoff	Clears all SSO cookies on the client with prefix values matching the value configured in local.webmail.sso.prefix when the client logs out. If set to 0, the WebMail server only clears its own SSO cookie. The default is 0.
logfile.*.buffersize	Size of log buffers (in bytes). Default: 0. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.expirytime	Amount of time logfile is kept (in seconds). Default: 604800. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.flushinterval	Time interval for flushing buffers to log files (in seconds). Default: 60. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.logdir	Directory path for log files. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.loglevel	* can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.logtype	* can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.maxlogfiles	Maximum number for files. Default: 10. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.maxlogfilesize	Maximum size (bytes) of each log file. Default: 2097152. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.maxlogsize	Maximum size of all logfiles. Default: 20971520. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.minfreediskspace	Minimum amount of free disk space (bytes) that must be available for logging. Default: 5242880. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.rollovertime	The frequency in which to rotate logfiles (in seconds). Default: 86400. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.syslogfacility	Specifies whether or not logging goes to syslog. * can be one of the following components: admin, default, http, imap, imta, pop. The values can be user, mail, daemon, local0 to local7, or none. If the value is set, messages are logged to the syslog facility corresponding to the set value and all other log file service options are ignored. Default: none (logging uses the Message Server log files).
logfiles.admin.alias	Default:|logfile|admin
logfiles.default.alias	Default:|logfile|default
logfiles.http.alias	Default:|logfile|http
logfiles.imap.alias	Default:|logfile|imap
logfiles.imta.alias	Default:|logfile|imta
logfiles.pop.alias	Default:|logfile|pop
service.authcachesize	Each entry takes 60 bytes. Default: 10000
service.authcachettl	Cache entry TTL in seconds. Default: 900.
service.dcroot	Root of DC tree in Directory Server. Default: o=Internet.
service.defaultdomain	Used to complete email address without domains.
service.dnsresolveclient	Sets whether or not to reverse name lookup client host. Default: no.
service.http.allowadminproxy	Sets whether or not to allow admin to proxy auth. Default: no.
service.http.allowanonymouslogin	Sets whether or not to allow anonymous login. Default: no.
service.http.connlimits	Maximum number of connections per IP address.
service.http.domainallowed	Access filters for HTTP services.
service.http.domainnotallowed	Deny filters for HTTP services.
service.http.enable	Sets whether or not the server is started automatically. Default: yes.
service.http.enablesslport	Sets whether or not the service is started on a sslport. Default: no.
service.http.extraldapattrs	Extra LDAP attributes for customization.
service.http.fullfromheader	Sets whether or not to send complete "from" header. Default: no.
service.http.idletimeout	Idle timeout (in minutes). Default: 3.
service.http.ipsecurity	Sets whether or not to restrict session access to login IP addresses. Default: yes.
service.http.ldappoolsize	Number of LDAP connections. Default: 1.
service.http.maxmessagesize	Maximum message size client is allowed to send. Default: 5242880.
service.http.maxpostsize	Maximum http post content length. Default: 5242880.
service.http.maxsessions	Maximum number of sessions per server process. Default: 6000.
service.http.maxthreads	Maximum number of threads per server process. Default: 250.
service.http.numprocesses	Number of processes. Default: 1.
service.http.plaintextmincipher	Sets plain text login allowance. Specify 0 to allow plain text login always. Specify -1 to never allow plain text login. Specify 40 or 128 to require login using encryption using 40 or 128 bit key. Default: 0.
service.http.port	Server port number. Default: 80.
service.http.proxydomainallowed	Access filters for proxy authentication to the HTTP service.
service.http.resourcetimeout	Webmail resource reduction timeout (in seconds). Default: 900.
service.http.sessiontimeout	Webmail client session timeout. Default: 7200.
service.http.smtphost	SMTP relay host.
service.http.smtpport	SMTP relay port. Default: 25.
service.http.sourceurl	Webmail server URL.
service.http.spooldir	Spool directory for outgoing client mail.
service.http.sslcachesize	Number of SSL sessions to be cached. Default: 0.
service.http.sslport	SSL server port number. Default: 443.
service.http.sslsourceurl	Webmail server URL.
service.http.sslusessl	Sets whether or not to enable SSL. Default: yes.
service.imap.allowanonymouslogin	Allows anonymous login. Default: no.
service.imap.banner	IMAP protocol welcome banner.
service.imap.connlimits	Maximum number of connections per IP address.
service.imap.domainallowed	Access filters for IMAP services.
service.imap.domainnotallowed	Deny filters for IMAP services.
service.imap.enable	Sets whether or not the server is started automatically. Default: yes.
service.imap.enablesslport	Sets whether or not service is started on sslport. Default: no.
service.imap.idletimeout	Idle timeout (in minutes). Default: 30.
service.imap.ldappoolsize	Number of LDAP connections. Default: 1.
service.imap.maxsessions	Maximum number of sessions per server process. Default: 4000.
service.imap.maxthreads	Maximum number of threads per server process. Default: 250.
service.imap.numprocesses	Number of processes. Default: 1.
service.imap.plaintextmincipher	Sets plain text login allowance. Specify 0 to allow plain text login always. Specify -1 to never allow plain text login. Specify 40 or 128 to require login using encryption using 40 or 128 bit key. Default: 0.
service.imap.port	Server port number. Default: 143.
service.imap.sslcachesize	Number of SSL sessions to be cached. Default: 0.
service.imap.sslport	SSL server port number. Default: 993.
service.imap.sslusessl	Sets whether or not SSL is enabled. Default: yes.
service.ldapmemcache	Sets whether to enable or disable LDAP SDK memcache feature. Default: no.
service.ldapmemcachesize	Cache size in bytes. Default: 131072.
service.ldapmemcachettl	Length of time cache entry lives (in seconds). Default: 30.
service.ldappoolsize	Number of LDAP connections. Default: 1.
service.listenaddr	The IP address on which to listen.
service.loginseparator	The character to be used as the login separator. Default: @.
service.plaintextloginpause	The pause interval after successful login. Default: 0.
service.pop.allowanonymouslogin	Sets whether or not anonymous login is allowed. Default: no.
service.pop.banner	POP protocol welcome banner.
service.pop.connlimits	Maximum number of connections per IP address.
service.pop.domainallowed	Access filters for POP services.
service.pop.domainnotallowed	Deny filters for POP services.
service.pop.enable	Sets whether or not the server is started automatically. Default: yes.
service.pop.idletimeout	Idle timeout (in minutes). Default: 10.
service.pop.ldappoolsize	Number of LDAP connections. Default: 1.
service.pop.maxsessions	Maximum number of sessions per server process. Default: 600.
service.pop.maxthreads	Maximum number of threads per server process. Default: 250.
service.pop.numprocesses	Number of processes.
service.pop.plaintextmincipher	Sets plain text login allowance. Specify 0 to allow plain text login always. Specify -1 to never allow plain text login. Specify 40 or 128 to require login using encryption using 40 or 128 bit key. Default: 0.
service.pop.popminpoll	Minimum client poll interval in seconds. Default: 0.
service.pop.port	POP server port number. Default: 110.
service.pop.sslusessl	Sets whether or not to enable SSL. Default: yes.
service.readtimeout	Length of time permitted to receive "hello" string when checking for server response time. Default: 10.
service.sslpasswdfile	Password for each keyfile.
store.admins	Space separated list of user ids with Message Store Administrator privileges.
store.cleanupage	Minimum amount of time between expunge and cleanup (in hours). Default: 1.
store.dbcachesize	Mailbox list database cache size. Default: 8388608
store.dbtmpdir	Mailbox list database temporary directory.
store.defaultacl	Default ACL.
store.defaultmailboxquota	Default mailbox quota, if not specified in user account. Default: -1 (infinite).
store.defaultmessagequota	Default message quota, if not specified in user account. Default: -1 (infinite).
store.defaultpartition	Default partition.
store.diskflushinterval	Default: 15
store.expirerule.*.exclusive	When this parameter is set to `yes,' it is the only rule applied even if other rules match the given criteria. Default: no
store.expirerule.*.folderpattern	Folders by which the rules apply
store.expirerule.*.foldersizebytes	Maximum number of bytes in a folder.
store.expirerule.*.messagecount	Upper limit on number of messages to be kept in the specified folders.
store.expirerule.*.messagedays	Upper limit on how long a message is kept in the specified folders.
store.expirerule.*.messagesize	Maximum number of bytes in a message.
store.expirerule.*.messagesizedays	Length of time messagesize message can stay.
store.expirestart	Specifies the hour at which stored starts cleanup and expire on a daily basis. Default: 23
store.partition.*.path	Store partition directory path.
store.partition.primary.path	Full path name of the primary partition Default: server-root/msg-instance/store/ partition/primary
store.quotaenforcement	Turns quotaenforcement on or off. Default: on.
store.quotaexceededmsg	Message to be sent to user when quota exceeds store.quotawarn. To enable this parameter, you can set the following configuration variables: configutil -o store.quotaexceededmsg -v 'Subject: WARNING: User quota exceeded\$\$User quota threshold exceeded - reduce space used.' configutil -o store.quotanotification -v on Default: null
store.quotaexceededmsginterval	Interval (in days) to wait before sending another quotaexceededmsg. Default: 7.
store.quotagraceperiod	Time (in hours) messages are held in the message queue before the server starts bouncing the messages. Messages will remain in the queue until one of the following: The mailbox no longer exceeds the quota. The user has remained over quota longer than the specified grace period. The message has remained in the queue longer than the maximum message queue time. Default: 120.
store.quotanotification	Enables quota notification for the Message store.
store.quotawarn	Percentage of quota that is exceeded before clients are warned. Default: 90.
store.serviceadmingroupdn	DN of service administrator group.
store.umask	umask Default: 077