16 Calendar Server Configuration Parameters

Table 16-1 describes the configuration parameters and descriptions for Calendar Server. See "davadmin config" for information on how to update or change configuration parameters.

Table 16-1 Calendar Server Configuration Parameters

Parameter Description

base.ldapinfo.cachesize

Size of the LDAP Authentication cache.

Syntax: integer

Minimum: 1

Maximum: 1000000

Default: 1000

base.ldapinfo.cachettl

Time to live (in seconds) of cached LDAP Authentication info.

Syntax: integer

Unit: seconds

Minimum: 1

Maximum: Maximum int value

Default: 60

base.ldapinfo.dcroot

Root of DC tree (Schema 1) or of the domain and users tree (Schema 2) in Directory Server

Syntax: string

Default: o=isp

base.ldapinfo.defaultdomain

Default domain

Syntax: string

Default: demo.example.com

base.ldapinfo.domainattrs

Space separated list of LDAP attributes to use when retrieving domain information.

Syntax: string

Default: icsStatus icsDomainNames icsDomainAcl externalAuthPreUrlTemplate externalAuthPostUrlTemplate corpDirectoryUrl

base.ldapinfo.loginseparator

Character(s) to be used as login separator (between user ID and domain)

Syntax: string

Default: @

base.ldapinfo.schemalevel

Schema level.

Syntax: integer

Minimum: 1

Maximum: 2

Default: 2

base.ldapinfo.searchfilter

This is the search filter used to look up users during authentication when one is not specified in the inetDomainSearchFilter for the domain. The syntax is the same as inetDomainSearchFilter . See Communications Suite Schema Reference for more information.

Syntax: string

Default: (uid=%U)

base.ldapinfo.serviceadmindn

Distinguished name of single administrator in LDAP in absence of admin group.

Syntax: string

Default: None.

base.ldapinfo.serviceadminsgroupdn

Distinguished Name of service admins group in LDAP.

Syntax: string

Default: None.

base.ldapinfo.userattrs

Space-separated list of LDAP attributes to retrieve from user entries during the authentication phase.

Syntax: string

Default: mail ismemberof

base.ldapinfo.authldap.binddn

Distinguished name to use when authenticating.

Syntax: string

Default: None.

base.ldapinfo.authldap.bindpassword

Password to use when authenticating.

Syntax: password

Default: None

base.ldapinfo.authldap.ldaphost

Space-delimited list of host names. Each host name may include a trailing colon and port number.

Syntax: string

Default: localhost:389

base.ldapinfo.authldap.ldappoolrefreshinterval

Length of elapsed time until the failover Directory Server host reverts back to the primary Directory Server host. If set to -1, does not refresh.

Syntax: integer

Unit: minutes

Minimum: 1

Maximum: 60

Default: 1

base.ldapinfo.authldap.ldappoolsize

Maximum number of connections for this pool.

Syntax: integer

Minimum: 1

Maximum: 100

Default: 10

base.ldapinfo.authldap.ldapport

Port number to which to connect. Ignored for any host name which includes a colon and port number.

Syntax: integer

Minimum: 0

Maximum: 65535

Default: 389

base.ldapinfo.authldap.ldaptimeout

Timeout for all LDAP operations.

Syntax: integer

Unit: seconds

Minimum: 1

Maximum: 3600

Default: 60

base.ldapinfo.authldap.ldapusessl

Use SSL to connect to the LDAP host.

Syntax: boolean

Default: false

base.ldapinfo.authldap.sslprotocols

Specifies a space-delimited list of the supported SSL protocols to communicate with the LDAP back-end service.

Syntax: string

Default: TLSv1 TLSv1.1 TLSv1.2

base.ldapinfo.ugldap.binddn

Distinguished name to use when authenticating.

Syntax: string

Default: None.

base.ldapinfo.ugldap.bindpassword

Password to use when authenticating.

Syntax: password

Default: None.

base.ldapinfo.ugldap.ldaphost

Space-delimited list of host names. Each host name may include a trailing colon and port number.

Syntax: string

Default: localhost:389

base.ldapinfo.ugldap.ldappoolrefreshinterval

Length of elapsed time until the failover Directory Server host reverts back to the primary Directory Server host. If set to -1, do not refresh.

Syntax: integer

Unit: minutes

Minimum: 1

Maximum: 60

Default: 1

base.ldapinfo.ugldap.ldappoolsize

Maximum number of connections for this pool.

Syntax: integer

Minimum: 1

Maximum: 100

Default: 10

base.ldapinfo.ugldap.ldapport

Port number to which to connect. Ignored for any host name that includes a colon and port number.

Syntax: integer

Minimum: 0

Maximum: 65535

Default: 389

base.ldapinfo.ugldap.ldaptimeout

Timeout for all LDAP operations.

Syntax: integer

Unit: seconds

Minimum: 1

Maximum: 3600

Default: 60

base.ldapinfo.ugldap.ldapusessl

Use SSL to connect to the LDAP host.

Syntax: boolean

Default: false

base.ldapinfo.ugldap.sslprotocols

Specifies a space-delimited list of the supported SSL protocols to communicate with the back-end LDAP service.

Syntax: string

Default: TLSv1 TLSv1.1 TLSv1.2

base.ldappool.*.binddn

Distinguished name to use when authenticating.

Syntax: string

Default: None.

base.ldappool.*.bindpassword

Password to use when authenticating.

Syntax: password

Default: None.

base.ldappool.*.ldaphost

Space-delimited list of host names. Each host name may include a trailing colon and port number.

Syntax: string

Default: localhost:389

base.ldappool.*.ldappoolrefreshinterval

Length of elapsed time until the failover Directory Server host reverts back to the primary Directory Server host. If set to -1, do not refresh.

Syntax: integer

Unit: minutes

Minimum: 1

Maximum: 60

Default: 1

base.ldappool.*.ldappoolsize

Maximum number of connections for this pool.

Syntax: integer

Minimum: 1

Maximum: 100

Default: 10

base.ldappool.*.ldapport

Port number to which to connect. Ignored for any host name that includes a colon and port number.

Syntax: integer

Minimum: 0

Maximum: 65535

Default: 389

base.ldappool.*.ldaptimeout

Timeout for all LDAP operations.

Syntax: integer

Unit: seconds

Minimum: 1

Maximum: 3600

Default: 60

base.ldappool.*.ldapusessl

Use SSL to connect to the LDAP host.

Syntax: boolean

Default: false

base.ldappool.*.sslprotocols

Specifies a space-delimited list of the supported SSL protocols for the LDAP pool to communicate with the back-end LDAP service.

Syntax: string

Default: TLSv1 TLSv1.1 TLSv1.2

davcore.acl.aclcachesize

Maximum number of ACL entries kept in cache. Entries are removed from the cache only when this maximum is reached or when any of the acl configuration parameters are changed. Can be set to 0, indicating no cache.

Syntax: integer

Minimum: 0

Maximum: Maximum int value

Default: 1000

davcore.acl.aclcachettl

Maximum amount of time (in seconds) that an ACL entry can be kept in cache.

Syntax: integer

Unit: seconds

Minimum: 1

Maximum: Maximum int value

Default: 60

davcore.acl.appleprivateevent

Enables or disables Apple Private/Confidential Events extension support.

Syntax: boolean

Default: false

davcore.acl.calendaranonymousall

If true, map '@'(all) in calendar acls to authenticated and unathenticated users. If false, map '@'(all) in acl to just authenticated users.

Syntax: boolean

Default: true

If you change the davcore.acl.calendaranonymousall parameter, the change does not affect ACLs that were previously configured. Changing davcore.acl.calendaranonymousall only affects new ACLs.

davcore.acl.defaultcalendaracl

ACL to set when creating a new calendar collection (using the WCAP format).

Syntax: string

Default: None.

davcore.acl.defaultresourcecalendaracl

ACL to set when creating a new calendar collection for a resource (using the WCAP format).

Syntax: string

Default: @:r

davcore.acl.defaultresourceschedulingacl

ACL for user permissions to be set when creating a new calendar inbox collection for a resource (using the WCAP format).

Syntax: string

Default: @:s

davcore.acl.defaultschedulingacl

ACL for user permissions to be set when creating a new calendar inbox collection (using the WCAP format).

Syntax: string

Default: @:s

davcore.acl.schedulinganonymousall

If true, map '@'(all) in scheduling ACLs to authenticated and unathenticated users. If false, map '@'(all) in acl to just authenticated users.

Syntax: boolean

Default: true

If you change the davcore.acl.schedulinganonymousall parameter, the change does not affect ACLs that were previously configured. Changing davcore.acl.schedulinganonymousall only affects new ACLs.

davcore.attachment.enable

Enables or disables attachments.

Syntax: boolean

Default: true

davcore.auth.cert.enable

Enables certificate-based client authentication.

Syntax: boolean

Default: false

davcore.auth.cert.fallback

Fallback to user name and password authentication.

Syntax: boolean

Default: true

davcore.autocreate.calattendantresourceflags

Calendar attendant flags to set on resource scheduling inbox. Default setting used on autocreation.

This value can be altered by the presence of the icsAutoAccept and icsDoubleBooking attributes. The value is a bitmask of the following:

0 - No automatic accept, no booking conflict check, no recurrence check on invitations.

1 - Automatically accept invitations.

2 - Automatically declines if invitation results in booking conflict.

3 - Automatically accepts invitation and automatically declines on booking conflict.

4 - Automatically declines recurring meeting invitations.

5 - Automatically accepts invitations and automatically decline recurring meeting invitations.

6 - Automatically declines recurring invitations and invitations that cause a booking conflict.

7 - Automatically accepts invitations, automatically declines recurring invitations and invitations that cause a booking conflict.

Syntax: long

Minimum: 0

Maximum: 7

Default: 3

davcore.autocreate.calattendantuserflags

Calendar attendant flags to set on users scheduling inbox. Default setting used on autocreation.

This value can be altered by the presence of the icsAutoAccept and icsDoubleBooking attributes.

The value is a bitmask of the following:

0 - No automatic accept, no booking conflict check, no recurrence check on invitations.

1 - Automatically accepts invitations.

2 - Automatically declines if invitation results in booking conflict.

3 - Automatically accepts invitation and automatically declines on booking conflict.

4 - Automatically declines recurring meeting invitations.

5 - Automatically accepts invitations and automatically declines recurring meeting invitations.

6 - Automatically declines recurring invitations and invitations that cause a booking conflict.

7 - Automatically accepts invitations, automatically declines recurring invitations and invitations that cause a booking conflict.

Syntax: long

Minimum: 0

Maximum: 7

Default: 0

davcore.autocreate.calcomponents

Supported calendar components set for a new user calendar on autocreation. Default setting used on autocreation.

Syntax: string

Default: VEVENT VTODO VFREEBUSY

davcore.autocreate.displaynameattr

LDAP attribute, whose value is used to set Display Name, during autocreation. Default setting used on autocreation.

Syntax: string

Default: cn

davcore.autocreate.emailnotificationaddressattr

LDAP attribute, whose value is used to set Email Notification address, during autocreation. Default setting used on autocreation.

Syntax: string

Default: mail

davcore.autocreate.enableautocreate

Enable autocreate operation. Default setting used on autocreation.

Syntax: boolean

Default: true

davcore.autocreate.enableemailnotification

Enable email notification. Default setting used on autocreation.

Syntax: boolean

Default: true

davcore.autocreate.rescalcomponents

Supported calendar components set for a new resource calendar on autocreation. Default setting used on autocreation.

Syntax: string

Default: VEVENT

davcore.homeuri.*.backendid

Once it is determined that a URI matches the pattern, this backendid template is used to identify the back end server hosting this resource.

The template can reference the $1, $2,... variables saved during the pattern matching, as well as references to LDAP attributes of the subject matching the subjectfilter, using the ${attrname} syntax or the ${attrname,defaultvalue} syntax. If this parameter is not set, the uriinfo.backendidtemplate is used.

Syntax: string

Default: None.

davcore.homeuri.*.rank

When multiple URI patterns are configured, this value determines in which order those URI patterns are evaluated. A lower number indicates that this pattern should be evaluated first.

Syntax: integer

Minimum: 0

Maximum: Maximum int value

Default: 1

davcore.homeuri.*.subjectdomain

Once it is determined that a URI matches the pattern, this domain template is used to identify the subject owning with this resource.

The template can reference the $1, $2, and so variables saved during the pattern matching. For example, if the subjectdomain is set to $2, and using the URI in the uripattern example, the domain of the subject will be example.com.

Can be empty indicating the default domain.

Syntax: string

Default: $2

davcore.homeuri.*.subjectfilter

Once it is determined that a URI matches the pattern, this LDAP filter template is used to identify the subject owning with this resource.

The template can reference the $1, $2, and so on variables saved during the pattern matching. For example, if the subjectfilter is set to (mail=$1@$2), and using the URI in the uripattern example, the LDAP filter becomes (mail=john@example.com).

Can be empty, indicating that this namespace is not associated with a particular subject.

Syntax: string

Default: (mail=$1@$2)

davcore.homeuri.*.uripattern

Regex pattern to be matched by the URI.

This pattern can contain regex groups (identified by () parenthesis) which will be saved into $1, $2, and so on.

The last regex group identifies the local path if there is any.

For example, if the pattern is ^/home/([^/]+)@([^/]+)(/\z|/.*), the URI /home/john@example.com/calendar/ matches that pattern. $1 will be set to the value john, $2 will be set to the value example.com, and the local path will be /calendar.

Syntax: string

Default: ^/home/([^/]+)@([^/]+)(/\z|/.*)

davcore.ldapattr.commonname

Common name attribute.

Syntax: string

Default: cn

davcore.ldapattr.corpdirectoryurl

LDAP attribute to locate a custom external corporate directory for this domain.

Syntax: string

Default: corpDirectoryUrl

davcore.ldapattr.davstore

Logical back-end ID attribute.

Syntax: string

Default: davStore

davcore.ldapattr.defaultresourcetype

Default CUTYPE value to use when the resource type LDAP attribute of a calendar resource is not present.

Syntax: string

Default: ROOM

davcore.ldapattr.dngroupmember

Attributes for members in an LDAP group.

Syntax: string

Default: uniquemember

davcore.ldapattr.externalauthposturltemplate

LDAP attribute to use to determine whether external authentication should do a post=auth lookup against this domain.

Syntax: string

Default: externalAuthPostUrlTemplate

davcore.ldapattr.externalauthpreurltemplate

LDAP attribute to use to determine whether external authentication should be used against this domain.

Syntax: string

Default: externalAuthPreUrlTemplate

davcore.ldapattr.groupobject

Space separated list of object class values indicating an LDAP group.

Syntax: string

Default: groupofuniquenames groupofurls inetmailgroup

davcore.ldapattr.icsautoaccept

LDAP attribute to use to determine whether autoaccept should be enabled.

The attribute value can be 1 (autoaccept) or 0 (no autoaccept).

It is used only during autocreate.

Syntax: string

Default: icsAutoAccept

davcore.ldapattr.icsdoublebooking

LDAP attribute to use to determine whether double booking is allowed.

The attribute value can be 1 (double booking allowed) or 0 (no double booking allowed).

It is used only during autocreate.

Syntax: string

Default: icsDoubleBooking

davcore.ldapattr.icsstatus

Calendar Service status attribute.

Syntax: string

Default: icsstatus

davcore.ldapattr.inetresourcestatus

LDAP attribute for global status of resources.

Syntax: string

Default: inetresourcestatus

davcore.ldapattr.inetuserstatus

LDAP attribute for status of user's account with regards to global service access.

Syntax: string

Default: inetuserstatus

davcore.ldapattr.mail

Mail attribute.

Syntax: string

Default: mail

davcore.ldapattr.mailalternateaddress

Space-separated list of alternate mail attributes.

Syntax: string

Default: mailAlternateAddress

davcore.ldapattr.mailgroupmember

Attributes for members in an LDAP group.

Syntax: string

Default: mgrprfc822mailmember

davcore.ldapattr.memberattr

LDAP attribute listing the groups of which the entry is a member.

Syntax: string

Default: ismemberof

davcore.ldapattr.preferredlang

Language attribute.

Syntax: string

Default: preferredLanguage

davcore.ldapattr.resourceobject

Space-separated list of object class values indicating an LDAP resource.

Syntax: string

Default: icsCalendarResource

davcore.ldapattr.resourceowner

LDAP attribute to use to determine the owner of a calendar resource (for example, conference room).

The attribute value must be a distinguished name.

It is used only during autocreate.

Syntax: string

Default: owner

davcore.ldapattr.resourcetype

LDAP attribute to use to determine the CUTYPE (ROOM versus RESOURCE) of a calendar resource.

The CUTYPE of users and groups is not based on this attribute.

The attribute value can take the following values:

  • Location and room are mapped to a CUTYPE of ROOM.

  • Thing and resource are mapped to a CUTYPE of RESOURCE.

  • Other values are mapped to RESOURCE.

Syntax: string

Default: kind

davcore.ldapattr.uid

User ID attribute.

Syntax: string

Default: uid

davcore.ldapattr.urlgroupmember

Attributes for members in an LDAP group.

Syntax: string

Default: memberurl

davcore.ldapattr.userobject

Space separated list of object class values indicating a calendar user.

Syntax: string

Default: None.

davcore.otheruri.*.backendid

Once it is determined that a URI matches the pattern, this backendid template is used to identify the back end server hosting this resource.

The template can reference the $1, $2, and so on variables saved during the pattern matching, as well as refer to LDAP attributes of the subject matching the subjectfilter, using the ${attrname} syntax or the ${attrname,defaultvalue} syntax. If this parameter is not set, the uriinfo.backendidtemplate is used.

Syntax: string

Default: None.

davcore.otheruri.*.rank

When multiple URI patterns are configured, this value determines in which order those URI patterns should be evaluated. A lower number indicates that this pattern should be evaluated first.

Syntax: integer

Minimum: 0

Maximum: Maximum int value

Default: 1

davcore.otheruri.*.subjectdomain

Once it is determined that a URI matches the pattern, this domain template is used to identify the subject owning with this resource.

The template can reference the $1, $2, and so on variables saved during the pattern matching. For example, if the subjectdomain is set to $2, and using the URI in the uripattern example, the domain of the subject will be example.com.

Can be empty indicating the default domain.

Syntax: string

Default: $2

davcore.otheruri.*.subjectfilter

Once it is determined that a URI matches the pattern, this LDAP filter template is used to identify the subject owning with this resource.

The template can reference the $1, $2, and so on variables saved during the pattern matching. For example, if the subjectfilter is set to (mail=$1@$2), and using the URI in the uripattern example, the LDAP filter becomes (mail=john@example.com).

Can be empty, indicating that this namespace is not associated with a particular subject.

Syntax: string

Default: (mail=$1@$2)

davcore.otheruri.*.uripattern

Regex pattern to be matched by the URI.

This pattern can contain regex groups (identified by () parenthesis) which is saved into $1, $2, and so on.

The last regex group identifies the local path if there is any.

For example, if the pattern is ^/home/([^/]+)@([^/]+)(/\z|/.*), the URI /home/john@example.com/calendar/ will match that pattern. $1 will be set to the value john, $2 will be set to the value example.com and the local path will be /calendar.

Syntax: string

Default: ^/home/([^/]+)@([^/]+)(/\z|/.*)

davcore.presence.advancepresencetriggerinterval

Specifies the number of seconds in advance to trigger for presence update. That is, how long before event start/end is the made. Changes to this value do not affect existing event triggers.

Syntax: long

Unit: seconds

Minimum: 0

Maximum: Maximum long value

Default: 0

davcore.presence.enable

Enables or disables presence information publication.

Syntax: boolean

Default: true

davcore.principalsuri.*.backendid

Once it is determined that a URI matches the pattern, this backendid template is used to identify the back-end server hosting this resource.

The template can reference the $1, $2, and so on variables saved during the pattern matching, as well as refers to LDAP attributes of the subject matching the subjectfilter, using the ${attrname} syntax or the ${attrname,defaultvalue} syntax. If this parameter is not set, the uriinfo.backendidtemplate is used.

Syntax: string

Default: None.

davcore.principalsuri.*.rank

When multiple URI patterns are configured, this value determines in which order those URI patterns should be evaluated. A lower number indicates that this pattern should be evaluated first.

Syntax: integer

Minimum: 0

Maximum: Maximum int value

Default: 1

davcore.principalsuri.*.subjectdomain

Once it is determined that a URI matches the pattern, this domain template is used to identify the subject owning with this resource.

The template can reference the $1, $2, and so on variables saved during the pattern matching.

For example, if the subjectdomain is set to $2, and using the uri in the uripattern example, the domain of the subject will be example.com.

Can be empty indicating the default domain.

Syntax: string

Default: $2

davcore.principalsuri.*.subjectfilter

Once it is determined that a URI matches the pattern, this LDAP filter template is used to identify the subject owning with this resource.

The template can reference the $1, $2, and so on variables saved during the pattern matching.

For example, if the subjectfilter is set to (mail=$1@$2), and using the URI in the uripattern example, the LDAP filter becomes (mail=john@example.com).

Can be empty, indicating that this namespace is not associated with a particular subject.

Syntax: string

Default: (mail=$1@$2)

davcore.principalsuri.*.uripattern

Regex pattern to be matched by the URI.

This pattern can contain regex groups (identified by () parenthesis) which will be saved into $1, $2, and so on.

The last regex group identifies the local path if there is any.

For example, if the pattern is ^/home/([^/]+)@([^/]+)(/\z|/.*), the URI /home/john@example.com/calendar/ will match that pattern. $1 will be set to the value john, $2 will be set to the value example.com and the local path will be /calendar.

Syntax: string

Default: ^/home/([^/]+)@([^/]+)(/\z|/.*)

davcore.reverseuri.*.backendid

Back-end ID on which to apply this reverse mapping. There should be only one mapping per backend.

Syntax: string

Default: None.

davcore.reverseuri.*.uritemplate

Canonical form of the URI prefix for this back end.

This template should have a corresponding uripattern. It should not end with a slash.

The template can reference LDAP attributes of the subject, using the ${attrname} syntax or the ${attrname,defaultvalue} syntax. The ${domain} syntax can be used to reference the domain of the subject.

If no template is defined for a given back end, the uriinfo.defaulthomeuritemplate configuration parameter is used.

Syntax: string

Default: None.

davcore.scheduling.allowownerdoublebooking

If set, owners of resource calendars can double book even if the resource account prevents double booking.

Syntax: boolean

Default: false

davcore.scheduling.calendarinboxexpirytime

Specifies the number of seconds after which the resources in calendar-inbox will be deleted.

Syntax: long

Unit: seconds

Minimum: 0

Maximum: Maximum long value

Default: 2592000

davcore.scheduling.calendaroutboxexpirytime

Specifies the number of seconds after which the resources in calendar outbox are deleted.

Syntax: long

Unit: seconds

Minimum: 0

Maximum: Maximum long value

Default: 604800

davcore.scheduling.includememberinattendee

If set, scheduling messages would include the MEMBER=group attribute in the ATTENDEE property, where group is the LDAP group of which this attendee is a member. The default is set to false to accommodate compatibility with Leopard Apple iCal.

Syntax: boolean

Default: false

davcore.scheduling.ischedulebackendid

iSchedule back-end identifier. If not set, incoming iSchedule requests are disabled.

Syntax: string

Default: None.

davcore.scheduling.itiptransmittablexprops

Space separated list of iCalendar X- properties that are transmittable through iTIP.

All other X- properties are not transmitted between organizer and attendees.

Syntax: string

Default: X-S1OC-OWNER-APPT-ID X-S1OC-TZID X-S1OC-OUTLOOK-SENDER-EMAIL X-S1OC-OUTLOOK-SENDER-CN X-S1OC-OUTLOOK-ACCEPTED-BY-NAME X-S1OC-OUTLOOK-EVENT-REPLY-TIME

davcore.scheduling.localuserattr

Local Calendar Server identifier attribute in LDAP. If not set, all users found in LDAP are considered local. For deployments with multiple servers, that can only partially interoperate, this option must be set to a valid LDAP attribute. (For example: davStore). Users with a valid value for that attribute in LDAP are considered local. Others are considered remote.

Make sure the same attribute is added to davcore.uriinfo.subjectattributes values.

Syntax: string

Default: None.

davcore.scheduling.maxattendeesforrefresh

Above this limit of attendees, attendee's reply are only sent to the organizer and are no longer propagated to the other attendees.

Syntax: long

Minimum: 0

Maximum: Maximum long value

Default: 50

davcore.scheduling.maxbookingwindow

Specifies the number of days calendars that do not allow double booking can be booked in advance. A valid range is [0, 2G].

Syntax: integer

Unit: days

Minimum: 1

Maximum: Maximum int value - 1

Default: 365

davcore.scheduling.maxretry

Specifies maximum number of attempts to deliver a scheduling message (for example, when the SMTP server or remote iSchedule server is temporarily down).

Syntax: integer

Minimum: 0

Maximum: 999

Default: 24

davcore.scheduling.minbookingwindow

Specifies the start of a booking window in days from the time of scheduling that a calendar can be booked in advance. A valid range is [0, 2G]. A negative integer value indicates minimum booking window is not honored during the free busy check.

Syntax: integer

Unit: days

Minimum: -1

Maximum: Maximum int value - 1

Default: -1

davcore.scheduling.rejectinactiverecipients

When set to true, recipients of scheduling messages who have their icsStatus set to inactive are treated as unknown recipients. Otherwise, those recipients are treated as iMIP recipients.

Syntax: boolean

Default: false

davcore.scheduling.rejectdeletedrecipients

When set to true, users or groups that have icsstatus set to 'deleted' are treated as external addresses and an iMIP invitation is sent.

Syntax: boolean

Default: false

davcore.scheduling.retryinterval

Specifies the number of seconds to wait between two attempts to deliver a scheduling message (for example, if the SMTP server or remote iSchedule server is temporarily down).

Syntax: long

Unit: seconds

Minimum: 0

Maximum: Maximum long value

Default: 3600

davcore.scheduling.schedulinglogfilter

Space-separated list of specific user email addresses. Logging is done at a more detailed level for any user in this list who is the organizer or an attendee of an event used for scheduling.

Syntax: string

Default: None.

davcore.scheduling.synchronousdelivery

If set, scheduling messages (invitations, replies, cancel, and so on) are delivered synchronously on submit. Do not use this option during under normal operation.

Syntax: boolean

Default: false

davcore.serverdefaults.exportconfigdir

Directory path for exported XSL transformation files.

Syntax: filepath

Default: config/export

davcore.serverdefaults.importconfigdir

Directory path for imported properties and translation files.

Syntax: filepath

Default: config/import

davcore.serverdefaults.jsonprefix

Default prefix to append to all JSON output.

Syntax: string

Default: &&

davcore.serverdefaults.sslprotocols

Specifies a space-delimited list of the supported SSL protocols as the default for the various back-end services' sslprotocols configuration. That is, if the specific sslprotocols parameter is not set, it is set to the value of davcore.serverdefaults.sslprotocols.

Syntax: string

Default: TLSv1 TLSv1.1 TLSv1.2

davcore.serverdefaults.tzid

Default TZID to return when a calendar collection does not have one explicity set.

Syntax: string

Default: None.

davcore.serverlimits.httpconnecttimeout

HTTP connection timeout value (in milliseconds), when connecting to another server.

Syntax: integer

Minimum: 500

Maximum: 100000

Default: 5000

davcore.serverlimits.httpsockettimeout

HTTP Socket timeout value (in milliseconds), when connecting to another server, and waiting for data.

Syntax: integer

Minimum: 500

Maximum: 100000

Default: 5000

davcore.serverlimits.maxaddressbookcontentlength

Maximum size of an address book resource.

Syntax: long

Unit: bytes

Minimum: 0

Maximum: Maximum long value

Default: 10000000

davcore.serverlimits.maxattendeesperinstance

Maximum number of ATTENDEE properties in any instance of a calendar object resource stored in a calendar collection.

Syntax: long

Minimum: 0

Maximum: Maximum long value

Default: 1000

davcore.serverlimits.maxcalendarcontentlength

Maximum size of a calendar resource.

Syntax: long Unit: bytes

Minimum: 0

Maximum: Maximum long value

Default: 10000000

davcore.serverlimits.maxcontentlength

Maximum size of a resource. Might be overwritten for certain types of content (for example, text/calendar).

Syntax: long

Unit: bytes

Minimum: 0

Maximum: Maximum long value

Default: 10000000

davcore.serverlimits.maxgroupexpansion

Maximum nested level of group expansion.

Syntax: integer

Minimum: 0

Maximum: -1

Default: 3

davcore.serverlimits.maxhttpredirects

Maximum number of HTTP redirects to follow, when connecting to another server.

Syntax: integer

Minimum: 0

Maximum: 10

Default: 3

davcore.serverlimits.maxischedulecontentlength

Maximum size when posting ischedule requests. This affects iSchedule freebusy and scheduling requests.

Syntax: long

Unit: bytes

Minimum: 0

Maximum: Maximum long value

Default: 10000000

davcore.serverlimits.maxmigrationthreads

Maximum number of threads to create when running migration.

Syntax: integer

Minimum: 1

Maximum: 20

Default: 2

davcore.serverlimits.maxnumberofresourcesincollection

Maximum number of resources allowed in a collection. A value of -1 means no limit.

Syntax: long

Unit: bytes

Minimum: -1

Maximum: Maximum long value

Default: 10000

davcore.serverlimits.maxresults

Maximum number of resources returned by a single fetch operation (WebDAV PROPFIND, CalDAV Reports, WCAP fetch or export, and so on).

A value of 0 means no limit.

Admins are not affected by this limit.

Syntax: integer

Minimum: 0

Maximum: Maximum int value

Default: 10000

davcore.serverlimits.maxsearchtimerange

Maximum bounded search range in days.

Syntax: long

Unit: days

Minimum: 0

Maximum: 366000

Default: 3660

davcore.serverlimits.maxuploadcontentlength

Maximum size when uploading data. This affects operations that let you create multiple resources in one request (for example, import). It does not affect a regular PUT command.

Syntax: long

Unit: bytes

Minimum: 0

Maximum: Maximum long value

Default: 20000000

davcore.serverlimits.migrationtimeout

Maximum number of hours to wait before terminating a migration.

Syntax: integer

Minimum: 1

Maximum: 100

Default: 8

davcore.serverlimits.minsearchcharacters

Minimum number of characters allowed in a text filter search.

Syntax: integer

Minimum: 0

Maximum: 256

Default: 3

davcore.serverlimits.templockretry

Maximum number of attempts to acquire a temporary lock when doing write operations.

Syntax: integer

Minimum: 1

Maximum: Maximum int value

Default: 20

davcore.serverlimits.templocktimeout

Maximum amount of time to wait for a temporary lock when doing write operations.

Syntax: integer

Unit: seconds

Minimum: 1

Maximum: Maximum int value

Default: 60

davcore.serverlimits.templockusebackend

If true, temporary locks are ensured at the back-end level instead of staying local to a server instance.

Syntax: boolean

Default: false

davcore.uriinfo.backendidtemplate

The backendid template is used to identify the back-end server hosting the home of a given subject.

The template can reference LDAP attributes of the subject, using the ${attrname} syntax or the ${attrname,defaultvalue} syntax.

Syntax: string

Default: ${davStore,defaultbackend}

davcore.uriinfo.defaultdavuriprefix

Canonical form of DAV URI prefix for WebDAV-based protocols.

This prefix corresponds to one of the the DavServlet specific path (for example, /dav) as defined in web.xml.

It should not end with a slash.

Syntax: string

Default: /dav

davcore.uriinfo.defaulthomeuritemplate

Canonical form of a subject home URI prefix.

This template should have a corresponding uripattern. It should not end with a slash

The template can reference LDAP attributes of the subject, using the ${attrname} syntax or the ${attrname,defaultvalue} syntax. The ${domain} syntax can be used to reference the domain of the subject.

Syntax: string

Default: /home/${mail}

davcore.uriinfo.defaultprincipaluritemplate

Canonical form of a subject principal URI prefix.

This template should have a corresponding uripattern. It should not end with a slash.

The template can reference LDAP attributes of the subject, using the ${attrname} syntax or the ${attrname,defaultvalue} syntax. The ${domain} syntax can be used to reference the domain of the subject.

Syntax: string

Default: /principals/${mail}

davcore.uriinfo.defaultresturiprefix

Canonical form of REST URI prefix for WebDAV-based protocols.

This prefix corresponds to one of the RESTfulServlet specific path as defined in the web.xml file.

It should not end with a slash.

Syntax: string

Default: /rest

davcore.uriinfo.directoryrootcollection

Defines the root collection of all directory collections (without any prefix).

Syntax: string

Default: /directory/

davcore.uriinfo.emailsearchfiltertemplate

LDAP Filter used when searching a subject by email address. The %s token is replaced by the email value to search.

Syntax: string

Default: |(mail=%s)(mailalternateaddress=%s)

davcore.uriinfo.fulluriprefix

Full URL prefix to use wherever a full URL is required. It should not end with a slash.

This prefix is used to construct attachment URLs embedded in calendar resources.

Modifying this parameter does not change full URLs in already existing calendar resources.

If SSL is used, the host name part of this prefix should match the host name associated with the certificate.

Syntax: string

Default: http://localhost

davcore.uriinfo.ldapcachesize

Maximum number of subjects (LDAP users, resources and groups) kept in cache when mapping URIs and subjects. Entries are removed from the cache only when this maximum is reached or when any of the uriinfo configuration parameters are changed. Can be set to 0, indicating no cache.

Syntax: integer

Minimum: 0

Maximum: Maximum int value

Default: 1000

davcore.uriinfo.ldapcachettl

Maximum time (in seconds) that subjects (LDAP users, resources and groups) are kept in cache when mapping URIs and subjects.

Syntax: integer

Unit: seconds

Minimum: 1

Maximum: Maximum int value

Default: 60

davcore.uriinfo.permanentuniqueid

Name of an LDAP attribute present in the LDAP entry of all subjects (users, groups, resources, and so on) that defines a permanent and unique identifier for each subject.

The attribute value is used internally to do the mapping between the subject LDAP entry and its repository. As such, it should remain constant for the lifetime of the subject LDAP entry and it should be unique (at least within the subject domain).

Warning: Changing this configuration parameter results in data loss once the user's repository has been created.

Syntax: string

Default: davuniqueid

davcore.uriinfo.principalsrootcollection

Defines the root collection of all principals in their canonical form. (without any prefix). This parameter is used to return the WebDAV DAV:principal-collection-set property.

Syntax: string

Default: /principals/

davcore.uriinfo.subjectattributes

Space-separated list of LDAP attribute names to retrieve when doing a search for users, group or resources.

Syntax: string

Default: cn davstore icsstatus mail mailalternateaddress nsuniqueid owner preferredlanguage uid objectclass ismemberof uniquemember memberurl mgrprfc822mailmember kind

davcore.uriinfo.subjectsearchfilter

LDAP filter used when a user is searching for other users. The %s token is replaced by the search string.

Syntax: string

Default: (|(uid=%s*)(cn=*%s*)(mail=*%s*))

davcore.uriinfo.subjectsearchfilterminimum

The minimum number of characters allowed for the search string.

Syntax: integer

Minimum: -2147483648

Maximum: Maximum int value

Default: 3

davcore.uriinfo.uricachesize

Maximum number of resolved URIs kept in cache. Entries are removed from the cache only when this maximum is reached or when any of the uriinfo configuration parameters are changed.

Can be set to 0, indicating no cache.

Syntax: integer

Minimum: 0

Maximum: Maximum int value

Default: 10000

davcore.uriinfo.uricachettl

Maximum time (in seconds) that resolved URIs are kept in cache.

Syntax: integer

Unit: seconds

Minimum: 1

Maximum: Maximum int value

Default: 60

davcore.uriinfo.useldapproxyauth

If set to true, uses proxy authorization for any LDAP search on behalf of a user. If set to false, uses administrator credentials for all LDAP searches.

Syntax: boolean

Default: true

davcore.virusscan.auth

The virus scan connection should use user and password authorization.

Syntax: boolean

Default: false

davcore.virusscan.clivirusaction

Action to be performed when a virus is detected during command-line operation. Value is empty or delete.

Syntax: string

Default: None.

davcore.virusscan.debug

Enables or disables debugging on the virus SMTP connection.

Syntax: boolean

Default: false

davcore.virusscan.emailaddress

Email recipient address that the MTA is configured to use to trigger a custom virus scan. (Requires MTA configuration).

Syntax: string

Default: None.

davcore.virusscan.host

MTA host name configured to accept virus scans.

Syntax: string

Default: None.

davcore.virusscan.onlineenable

Enables or disables online virus scan.

Syntax: boolean

Default: false

davcore.virusscan.onlinefailureaction

Action to be performed when virus service fails during an online submission. Value is empty or reject.

Syntax: string

Default: None.

davcore.virusscan.onlinevirusaction

Action to be performed when a virus is detected during an online submission. Value is empty or reject.

Syntax: string

Default: None.

davcore.virusscan.pass

The SMTP authorization password for the SMTP virus scan connection.

Syntax: password

Default: None.

davcore.virusscan.port

MTA host port configured to accept virus scans.

Syntax: string

Default: 25

davcore.virusscan.starttls

The virus scan connection should use starttls.

Syntax: boolean

Default: false

davcore.virusscan.timeout

Timeout value (in milliseconds) for the connection to the MTA during a virus scan operation.

Syntax: string

Default: 10000

davcore.virusscan.user

The SMTP user authorized for the SMTP virus scan connection.

Syntax: string

Default: None.

davcore.virusscan.usessl

The virus scan connection should use SSL.

Syntax: boolean

Default: false

log.dav.commands.logdateformat

Specifies the date format pattern for the log.

Syntax: logdateformat

Default: yyyy-MM-dd'T'HH:mm:ss.SSSZ

log.dav.commands.logdir

Specifies the directory path for log files.

Syntax: filepath

Default: logs

log.dav.commands.loglevel

Specifies the log level.

Valid levels are OFF (no information is logged), SEVERE, WARNING, INFO, CONFIG, FINE, FINER, FINEST, ALL (all information is logged).

The FINEST and ALL levels produce a large amount of data.

Syntax: loglevel

Default: INFO

log.dav.commands.logtoparent

Flag to enable logging to the application server log file, in addition to the Calendar Server logs.

Syntax: boolean

Default: false

log.dav.commands.maxlogfiles

Maximum number of log files.

Syntax: integer

Minimum: 1

Maximum: 100

Default: 10

log.dav.commands.maxlogfilesize

Maximum size of each log file.

Syntax: integer

Unit: bytes

Minimum: 2097152

Maximum: Maximum int value

Default: 2097152

log.dav.errors.logdateformat

Specifies the date format pattern for the log.

Syntax: logdateformat

Default: yyyy-MM-dd'T'HH:mm:ss.SSSZ

log.dav.errors.logdir

Specifies the directory path for log files.

Syntax: filepath

Default: logs

log.dav.errors.loglevel

Specifies the log level.

Valid levels are OFF (no information is logged), SEVERE, WARNING, INFO, CONFIG, FINE, FINER, FINEST, ALL (all information is logged).

The FINEST and ALL levels produce a large amount of data.

Syntax: loglevel

Default: INFO

log.dav.errors.logtoparent

Flag to enable logging to the application server log file, in addition to the Calendar Server logs.

Syntax: boolean

Default: false

log.dav.errors.maxlogfiles

Maximum number of log files.

Syntax: integer

Minimum: 1

Maximum: 100

Default: 10

log.dav.errors.maxlogfilesize

Maximum size of each log file.

Syntax: integer

Unit: bytes

Minimum: 2097152

Maximum: Maximum int value

Default: 2097152

log.dav.scan.logdateformat

Specifies the date format pattern for the log.

Syntax: logdateformat

Default: yyyy-MM-dd'T'HH:mm:ss.SSSZ

log.dav.scan.logdir

Specifies the directory path for log files.

Syntax: filepath

Default: logs

log.dav.scan.loglevel

Specifies the log level.

Valid levels are OFF (no information is logged), SEVERE, WARNING, INFO, CONFIG, FINE, FINER, FINEST, ALL (all information is logged).

The FINEST and ALL levels produce a large amount of data.

Syntax: loglevel

Default: INFO

log.dav.scan.logtoparent

Flag to enable logging to the application server log file, in addition to the Calendar Server logs.

Syntax: boolean

Default: false

log.dav.scan.maxlogfiles

Maximum number of log files.

Syntax: integer

Minimum: 1

Maximum: 100

Default: 10

log.dav.scan.maxlogfilesize

Maximum size of each log file.

Syntax: integer

Unit: bytes

Minimum: 2097152

Maximum: Maximum int value

Default: 2097152

log.dav.scheduling.logdateformat

Specifies the date format pattern for the log.

Syntax: logdateformat

Default: yyyy-MM-dd'T'HH:mm:ss.SSSZ

log.dav.scheduling.logdir

Specifies the directory path for log files.

Syntax: filepath

Default: logs

log.dav.scheduling.loglevel

Specifies the log level.

Valid levels are OFF (no information is logged), SEVERE, WARNING, INFO, CONFIG, FINE, FINER, FINEST, ALL (all information is logged).

The FINEST and ALL levels produce a large amount of data.

Syntax: loglevel

Default: INFO

log.dav.scheduling.logtoparent

Flag to enable logging to the application server log file, in addition to the Calendar Server logs.

Syntax: boolean

Default: false

log.dav.scheduling.maxlogfiles

Maximum number of log files.

Syntax: integer

Minimum: 1

Maximum: 100

Default: 10

log.dav.scheduling.maxlogfilesize

Maximum size of each log file.

Syntax: integer

Unit: bytes

Minimum: 2097152

Maximum: Maximum int value

Default: 2097152

log.dav.telemetry.logdateformat

Specifies the date format pattern for the log.

Syntax: logdateformat

Default: yyyy-MM-dd'T'HH:mm:ss.SSSZ

log.dav.telemetry.logdir

Specifies the directory path for log files.

Syntax: filepath

Default: logs

log.dav.telemetry.loglevel

Specifies the log level.

Valid levels are OFF (no information is logged), SEVERE, WARNING, INFO, CONFIG, FINE, FINER, FINEST, ALL (all information is logged).

The FINEST and ALL levels produce a large amount of data.

Syntax: loglevel

Default: INFO

log.dav.telemetry.logtoparent

Flag to enable logging to the application server log file, in addition to the Calendar Server logs.

Syntax: boolean

Default: false

log.dav.telemetry.maxlogfiles

Maximum number of log files.

Syntax: integer

Minimum: 1

Maximum: 100

Default: 10

log.dav.telemetry.maxlogfilesize

Maximum size of each log file.

Syntax: integer

Unit: bytes

Minimum: 2097152

Maximum: Maximum int value

Default: 2097152

notification.dav.configdir

Specifies the directory path for notification configuration files or format files.

Syntax: filepath

Default: config/templates

notification.dav.dateformat

Specifies the date format pattern for notification. For example, EEE MMMMM dd, yyyy.

Syntax: dateformat

Default: EEE MMMMM dd, yyyy

notification.dav.enableemailnotif

Enables or disables server-wide email notification.

Syntax: boolean

Default: true

notification.dav.enableimip

Enables or disables server-wide iMIP scheduling.

Syntax: boolean

Default: true

notification.dav.enableimipemailnotif

Enables or disables server-wide scheduling email notification that contains iMIP data.

Syntax: boolean

Default: false

notification.dav.enablejmsnotif

Enables or disables server-wide Java Message Service (JMS) notification.

Syntax: boolean

Default: true

notification.dav.maxpayload

Maximum payload size in bytes.

Syntax: integer

Minimum: -2147483648

Maximum: Maximum int value

Default: 10000000

notification.dav.smtpauth

SMTP-AUTH access control mechanism flag.

Syntax: string

Default: false

notification.dav.smtpdebug

SMTP debug flag.

Syntax: string

Default: false

notification.dav.smtphost

SMTP host.

Syntax: string

Default: None.

notification.dav.smtppassword

SMTP password.

Syntax: password

Default: None.

notification.dav.smtpport

SMTP port.

Syntax: string

Default: 25

notification.dav.smtpstarttls

SMTP starttls flag.

Syntax: string

Default: true

notification.dav.smtpuser

SMTP user.

Syntax: string

Default: user

notification.dav.smtpusessl

SMTP use SSL flag.

Syntax: string

Default: false

notification.dav.timeformat

Specifies the time format pattern for notification. Use 'a' for AM/PM marker. For example, hh:mm:ss aaa.

Syntax: timeformat

Default: hh:mm:ss aaa

notification.dav.timezoneformat

Specifies the time zone format pattern for notification. Use 'z' for general time zone, or 'Z' for RFC822 time zone.

Syntax: timezoneformat

Default: z

service.dav.blacklist

List of CalDAV clients to be denied of service, expressed as a space separated list of regular expressions. Any client whose User-Agent HTTP header contains any of the regex is denied access.

Syntax: string

Default: None.

service.dav.ischedulewhitelist

List of hosts that are allowed to send iScheduling POST requests. Space-separated list of single host IP addresses and/or Classless Inter-Domain Routing (CIDR) entries. A CIDR entry is a base IP address followed by a number indicating how many upper bits to mask. For example, 10.20.30.0/24 matches all addresses in the range 10.20.30.0 - 10.20.30.255. If the entry is 0.0.0.0/0, all requests are allowed. If the list is empty, all requests are denied, except for those from "localhost".

Syntax: string

Default: None

service.dav.propfinddavheadervalue

Value of the HTTP Dav header value to return in all PROPFIND responses.

Syntax: string

Default: 1, 3, access-control, calendar-proxy, calendarserver-principal-property-search, calendar-access, calendar-auto-schedule, addressbook

service.dav.telemetry.filter

Space-separated list of request URIs that a particular request should match (start with) to be logged by telemetry (for example, /dav/home/jsmith/calendar/ /dav/home/jdoe/calendar/).

Syntax: string

Default: None.

service.dav.telemetry.forcetelemetry

Force telemetry for all users.

Warning: Setting this parameter to true generates a lot of data and should not be used on a production system.

Syntax: boolean

Default: false

service.wcap.blacklist

List of WCAP clients to be denied of service, expressed as a space-separated list of regular expressions. Any client whose User-Agent HTTP header contains any of the regex is denied access.

Syntax: string

Default: None.

service.wcap.maxsessions

Maximum number of WCAP session IDs stored in the sessions cache. Entries are removed from the cache only when this maximum is reached, or when a logout command is executed against the sessionid, or the entry has been in the cache for as long as the session timeout allows.

Syntax: integer

Minimum: 0

Maximum: Maximum int value

Default: 10000

service.wcap.sessiontimeout

Number of seconds before expiring a session.

Syntax: integer

Unit: seconds

Minimum: 1

Maximum: Maximum int value

Default: 1800

store.corpdir.defaultcorpdirectoryurl

Default corporate directory information to use when doing searches. Can be overwritten by domain specific information (corpDirectoryUrl LDAP attribute in the domain entry). If no baseDN is provided, the user's domain baseDN for users and group is used. The list of attributes to retrieve is ignored.

Syntax: string

Default: ldap://ugldap/??sub?(objectclass=*)

store.corpdir.enablecorpdir

Enables or disables corporate directory lookups.

Syntax: boolean

Default: true

store.corpdir.useldapproxyauth

If set to true, uses LDAP proxy authorization to issue LDAP searches on behalf of the logged in user.

If set to false, uses the LDAP Pool credentials for all LDAP searches.

This parameter applies only to the default corporate directory configuration.

Syntax: boolean

Default: true

store.dav.*.attachstorehost

Document store host.

Syntax: string

Default: None.

store.dav.*.attachstoreport

Document store port.

Syntax: integer

Minimum: -2147483648

Maximum: Maximum int value

Default: 8008

store.dav.*.backendid

Back-end identifier.

Syntax: string

Default: None.

store.dav.*.dbdir

Specifies the directory path for Calendar Server store.

Syntax: filepath

Default: data/db

store.dav.*.jndiname

JNDI name pointing to this back-end host's JDBC DataSource, as defined in the J2EE container (for example, jdbc/defaultbackend.

Syntax: string

Default: None.

store.dav.*.purgedelay

Sets the delay between deletion of a resource and its actual removal (purge) from the back-end database. Setting this value too low may cause synchronization clients to do a full resynchronization too often.

Syntax: long

Unit: seconds

Minimum: 0

Maximum: Maximum long value

Default: 2592000

store.document.password

Password to use when authenticating to a remote document store server.

Syntax: password

Default: None.

store.document.timeout

The HTTP(S) connection and read timeout value.

Syntax: integer

Minimum: -2147483648

Maximum: Maximum int value

Default: 10000

store.document.usessl

Use SSL for communications with the remote document store server.

Syntax: boolean

Default: false