Novell EDIRECTORY 8.8 - GUIDE, Manual

Page: 343 / 574

344 Novell eDirectory 8.8 Administration Guide
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
Attributes on the LDAP Group Object
Use the LDAP Group object to set up and manage the way LDAP clients access and use the
information on the Novell LDAP server.
To require TLS for simple binds, see “Requiring TLS for Simple Binds with Passwords” on
page 346 . This attribute specifies whether the LDAP server allows transmission of passwords in
clear text from an LDAP client. Values=0 (no) or 1 (yes).
To specify a default referral as well as how LDAP servers process LDAP referrals, see “Using
Referrals” on page 354 .
13.5 Refreshing the LDAP Server
After you change a configuration option or setting on an LDAP server, you must refresh the server
so that the changes can take effect.
filteredReplicaUsage Specifies whether the LDAP server should use a filtered
replica for an LDAP search.
Values=1 (use filtered replica), 0 (do not use filtered replica)
sslEnableMutualAuthentication Specifies whether SSL-based mutual authentication
(Certificate-based client authentication) is enabled on the
LDAP server.
ldapTLSVerifyClientCertificate Enables or disables verification of the client certificate for a
TLS operation through LDAP.
ldapNonStdAllUserAttrsMode Enables or disables the non standard, all user, and
operational attributes.
ldapBindRestrictions Sets the LDAP bind restrictions on the LDAP client
connections. You can allow or disallow anonymous binds
from the LDAP clients.
Values=0, 1
0 allows anonymous binds from the clients. 1 restricts the
clients from doing anonymous binds.
ldapEnablePSearch Specifies whether or not the persistent search feature is
enabled on the LDAP server.
Values= true, false
ldapMaximumPSearchOperations An integer value that limits the number of concurrent
persistent search operations possible. A value of 0 specifies
unlimited search operations.
ldapIgnorePSearchLimitsForEvents Indicates whether size and time limits should be ignored after
the persistent search request has sent the initial result set.
Values= true, false
If this attribute is set to false, the entire persistent search
operation is subject to the search limits. If either limit is
reached, the search fails with the appropriate error message.
Attribute Description