Red Hat 8.1, Справочник по командам

Страница: 39 / 372

cn=config
25
Parameter Description
Example nsslapd-auditlog-maxlogsize: 50
2.3.1.33. nsslapd-auditlog-maxlogsperdir (Audit Log Maximum Number of
Log Files)
This attribute sets the total number of audit logs that can be contained in the directory where the audit
log is stored. Each time the audit log is rotated, a new log file is created. When the number of files
contained in the audit log directory exceeds the value stored on this attribute, then the oldest version
of the log file is deleted. The default is
1
log. If this default is accepted, the server will not rotate the
log, and it grows indefinitely.
If the value for this attribute is higher than
1
, then check the
nsslapd-auditlog-
logrotationtime
attribute to establish whether log rotation is specified. If the
nsslapd-
auditlog-logrotationtime
attribute has a value of
-1
, then there is no log rotation. See
Section 2.3.1.30, “nsslapd-auditlog-logrotationtime (Audit Log Rotation Time)”
for more information.
Parameter Description
Entry DN cn=config
Valid Range 1 to the maximum 32 bit integer value
(2147483647)
Default Value 1
Syntax Integer
Example nsslapd-auditlog-maxlogsperdir: 10
2.3.1.34. nsslapd-auditlog-mode (Audit Log File Permission)
This attribute sets the access mode or file permissions with which audit log files are to be created.
The valid values are any combination of
000
to
777
since they mirror numbered or absolute UNIX file
permissions. The value must be a combination of a 3-digit number, the digits varying from
0
through
7
:
• 0 - None
• 1 - Execute only
• 2 - Write only
• 3 - Write and execute
• 4 - Read only
• 5 - Read and execute
• 6 - Read and write
• 7 - Read, write, and execute
In the 3-digit number, the first digit represents the owner's permissions, the second digit represents the
group's permissions, and the third digit represents everyone's permissions. When changing the default
value, remember that
000
does not allow access to the logs and that allowing write permissions to
everyone can result in the logs being overwritten or deleted by anyone.