public final class GlobalCfgDefn extends ManagedObjectDefinition<GlobalCfgClient,GlobalCfg>
The Global Configuration contains properties that affect the overall operation of the OpenDJ.
Modifier and Type | Class and Description |
---|---|
static class |
GlobalCfgDefn.DisabledPrivilege
Defines the set of permissable values for the "disabled-privilege" property.
|
static class |
GlobalCfgDefn.EtimeResolution
Defines the set of permissable values for the "etime-resolution" property.
|
static class |
GlobalCfgDefn.InvalidAttributeSyntaxBehavior
Defines the set of permissable values for the "invalid-attribute-syntax-behavior" property.
|
static class |
GlobalCfgDefn.SingleStructuralObjectclassBehavior
Defines the set of permissable values for the "single-structural-objectclass-behavior" property.
|
static class |
GlobalCfgDefn.UnauthenticatedRequestsPolicy
Defines the set of permissable values for the "unauthenticated-requests-policy" property.
|
static class |
GlobalCfgDefn.WritabilityMode
Defines the set of permissable values for the "writability-mode" property.
|
getAggregationPropertyDefinition, getAggregationPropertyDefinitions, getAllAggregationPropertyDefinitions, getAllChildren, getAllConstraints, getAllPropertyDefinitions, getAllRelationDefinitions, getAllReverseAggregationPropertyDefinitions, getAllReverseRelationDefinitions, getAllTags, getChild, getChildren, getConstraints, getDescription, getDescription, getName, getParent, getPropertyDefinition, getPropertyDefinitions, getRelationDefinition, getRelationDefinitions, getReverseAggregationPropertyDefinitions, getReverseRelationDefinitions, getSynopsis, getSynopsis, getUserFriendlyName, getUserFriendlyName, getUserFriendlyPluralName, getUserFriendlyPluralName, hasChildren, hasOption, hasTag, initialize, isChildOf, isParentOf, isTop, registerConstraint, registerOption, registerPropertyDefinition, registerRelationDefinition, registerTag, resolveManagedObjectDefinition, toString, toString
public static GlobalCfgDefn getInstance()
public GlobalCfgClient createClientConfiguration(ManagedObject<? extends GlobalCfgClient> impl)
ManagedObjectDefinition
createClientConfiguration
in class ManagedObjectDefinition<GlobalCfgClient,GlobalCfg>
impl
- The managed object.public GlobalCfg createServerConfiguration(ServerManagedObject<? extends GlobalCfg> impl)
ManagedObjectDefinition
createServerConfiguration
in class ManagedObjectDefinition<GlobalCfgClient,GlobalCfg>
impl
- The server managed object.public Class<GlobalCfg> getServerConfigurationClass()
ManagedObjectDefinition
getServerConfigurationClass
in class ManagedObjectDefinition<GlobalCfgClient,GlobalCfg>
public BooleanPropertyDefinition getAddMissingRdnAttributesPropertyDefinition()
Indicates whether the directory server should automatically add any attribute values contained in the entry's RDN into that entry when processing an add request.
public BooleanPropertyDefinition getAllowAttributeNameExceptionsPropertyDefinition()
Indicates whether the directory server should allow underscores in attribute names and allow attribute names to begin with numeric digits (both of which are violations of the LDAP standards).
public IpAddressMaskPropertyDefinition getAllowedClientPropertyDefinition()
A set of clients who will be allowed to establish connections to this Global Configuration.
Valid values include a host name, a fully qualified domain name, a domain name, an IP address, or a subnetwork with subnetwork mask. Specifying a value for this property in a connection handler will override any value set in the global configuration.
public StringPropertyDefinition getAllowedTaskPropertyDefinition()
Specifies the fully-qualified name of a Java class that may be invoked in the server.
Any attempt to invoke a task not included in the list of allowed tasks is rejected.
public BooleanPropertyDefinition getBindWithDnRequiresPasswordPropertyDefinition()
Indicates whether the directory server should reject any simple bind request that contains a DN but no password.
Although such bind requests are technically allowed by the LDAPv3 specification (and should be treated as anonymous simple authentication), they may introduce security problems in applications that do not verify that the client actually provided a password.
public BooleanPropertyDefinition getCheckSchemaPropertyDefinition()
Indicates whether schema enforcement is active.
When schema enforcement is activated, the directory server ensures that all operations result in entries are valid according to the defined server schema. It is strongly recommended that this option be left enabled to prevent the inadvertent addition of invalid data into the server.
public IntegerPropertyDefinition getCursorEntryLimitPropertyDefinition()
Specifies the maximum number of entry IDs that the directory server may retrieve by cursoring through an index during a search.
A value of 0 indicates that no cursor entry limit is enforced. Note that this is the default server-wide limit, but it may be overridden on a per-user basis using the ds-rlim-cursor-entry-limit operational attribute.
public AggregationPropertyDefinition<PasswordPolicyCfgClient,PasswordPolicyCfg> getDefaultPasswordPolicyPropertyDefinition()
Specifies the name of the password policy that is in effect for users whose entries do not specify an alternate password policy (either via a real or virtual attribute).
In addition, the default password policy will be used for providing default parameters for sub-entry based password policies when not provided or supported by the sub-entry itself. This property must reference a password policy and no other type of authentication policy.
public IpAddressMaskPropertyDefinition getDeniedClientPropertyDefinition()
A set of clients who are not allowed to establish connections to this Global Configuration.
Valid values include a host name, a fully qualified domain name, a domain name, an IP address, or a subnetwork with subnetwork mask. If both allowed and denied client masks are defined and a client connection matches one or more masks in both lists, then the connection is denied. If only a denied list is specified, then any client not matching a mask in that list is allowed. Specifying a value for this property in a connection handler will override any value set in the global configuration.
public EnumPropertyDefinition<GlobalCfgDefn.DisabledPrivilege> getDisabledPrivilegePropertyDefinition()
Specifies the name of a privilege that should not be evaluated by the server.
If a privilege is disabled, then it is assumed that all clients (including unauthenticated clients) have that privilege.
public EnumPropertyDefinition<GlobalCfgDefn.EtimeResolution> getEtimeResolutionPropertyDefinition()
Specifies the resolution to use for operation elapsed processing time (etime) measurements.
public DurationPropertyDefinition getIdleTimeLimitPropertyDefinition()
Specifies the maximum length of time that a client connection may remain established since its last completed operation.
A value of "0 seconds" indicates that no idle time limit is enforced.
public EnumPropertyDefinition<GlobalCfgDefn.InvalidAttributeSyntaxBehavior> getInvalidAttributeSyntaxBehaviorPropertyDefinition()
Specifies how the directory server should handle operations whenever an attribute value violates the associated attribute syntax.
public BooleanPropertyDefinition getJeBackendSharedCacheEnabledPropertyDefinition()
Indicates whether all the JE backends should share the same cache.
When enabled, all the JE backends share the same cache. JE backends will make better use of memory: the cache will use around at most 75% of the JVM Old Gen size. Note that the options db-cache-percent and db-cache-size for each backend will be ignored in this case. Note also that cache misses in one backend could cause cached data for other backends to be evicted. When disabled, each JE backend will have its own cache sized according to their options db-cache-percent/db-cache-size.
public IntegerPropertyDefinition getLookthroughLimitPropertyDefinition()
Specifies the maximum number of entries that the directory server should "look through" in the course of processing a search request.
This includes any entry that the server must examine in the course of processing the request, regardless of whether it actually matches the search criteria. A value of 0 indicates that no lookthrough limit is enforced. Note that this is the default server-wide limit, but it may be overridden on a per-user basis using the ds-rlim-lookthrough-limit operational attribute.
public IntegerPropertyDefinition getMaxAllowedClientConnectionsPropertyDefinition()
Specifies the maximum number of client connections that may be established at any given time
A value of 0 indicates that unlimited client connection is allowed.
public SizePropertyDefinition getMaxInternalBufferSizePropertyDefinition()
The threshold capacity beyond which internal cached buffers used for encoding and decoding entries and protocol messages will be trimmed after use.
Individual buffers may grow very large when encoding and decoding large entries and protocol messages and should be reduced in size when they are no longer needed. This setting specifies the threshold at which a buffer is determined to have grown too big and should be trimmed down after use.
public IntegerPropertyDefinition getMaxPsearchesPropertyDefinition()
Defines the maximum number of concurrent persistent searches that can be performed on directory server
The persistent search mechanism provides an active channel through which entries that change, and information about the changes that occur, can be communicated. Because each persistent search operation consumes resources, limiting the number of simultaneous persistent searches keeps the performance impact minimal. A value of -1 indicates that there is no limit on the persistent searches.
public BooleanPropertyDefinition getNotifyAbandonedOperationsPropertyDefinition()
Indicates whether the directory server should send a response to any operation that is interrupted via an abandon request.
The LDAP specification states that abandoned operations should not receive any response, but this may cause problems with client applications that always expect to receive a response to each request.
public AggregationPropertyDefinition<IdentityMapperCfgClient,IdentityMapperCfg> getProxiedAuthorizationIdentityMapperPropertyDefinition()
Specifies the name of the identity mapper to map authorization ID values (using the "u:" form) provided in the proxied authorization control to the corresponding user entry.
public IpAddressMaskPropertyDefinition getRestrictedClientPropertyDefinition()
A set of clients who will be limited to the maximum number of connections specified by the "restricted-client-connection-limit" property.
Valid values include a host name, a fully qualified domain name, a domain name, an IP address, or a subnetwork with subnetwork mask. Specifying a value for this property in a connection handler will override any value set in the global configuration.
public IntegerPropertyDefinition getRestrictedClientConnectionLimitPropertyDefinition()
Specifies the maximum number of connections a restricted client can open at the same time to this Global Configuration.
Once Directory Server accepts the specified number of connections from a client specified in restricted-client, any additional connection will be rejected. The number of connections is maintained by IP address. Specifying a value for this property in a connection handler will override any value set in the global configuration.
public BooleanPropertyDefinition getReturnBindErrorMessagesPropertyDefinition()
Indicates whether responses for failed bind operations should include a message string providing the reason for the authentication failure.
Note that these messages may include information that could potentially be used by an attacker. If this option is disabled, then these messages appears only in the server's access log.
public BooleanPropertyDefinition getSaveConfigOnSuccessfulStartupPropertyDefinition()
Indicates whether the directory server should save a copy of its configuration whenever the startup process completes successfully.
This ensures that the server provides a "last known good" configuration, which can be used as a reference (or copied into the active config) if the server fails to start with the current "active" configuration.
public StringPropertyDefinition getServerIdPropertyDefinition()
Specifies a unique identifier for the directory server which will identify the server within a replication topology.
Each directory server within the same replication topology must have a different server identifier. If no server identifier is specified then one must be provided in each replication server and replication domain configuration.
public EnumPropertyDefinition<GlobalCfgDefn.SingleStructuralObjectclassBehavior> getSingleStructuralObjectclassBehaviorPropertyDefinition()
Specifies how the directory server should handle operations an entry does not contain a structural object class or contains multiple structural classes.
public IntegerPropertyDefinition getSizeLimitPropertyDefinition()
Specifies the maximum number of entries that can be returned to the client during a single search operation.
A value of 0 indicates that no size limit is enforced. Note that this is the default server-wide limit, but it may be overridden on a per-user basis using the ds-rlim-size-limit operational attribute.
public StringPropertyDefinition getSmtpServerPropertyDefinition()
Specifies the address (and optional port number) for a mail server that can be used to send email messages via SMTP.
It may be an IP address or resolvable hostname, optionally followed by a colon and a port number.
public DnPropertyDefinition getSubordinateBaseDnPropertyDefinition()
Specifies the set of base DNs used for singleLevel, wholeSubtree, and subordinateSubtree searches based at the root DSE.
public DurationPropertyDefinition getTimeLimitPropertyDefinition()
Specifies the maximum length of time that should be spent processing a single search operation.
A value of 0 seconds indicates that no time limit is enforced. Note that this is the default server-wide time limit, but it may be overridden on a per-user basis using the ds-rlim-time-limit operational attribute.
public BooleanPropertyDefinition getTrustTransactionIdsPropertyDefinition()
Indicates whether the directory server should trust the transaction ids that may be received from requests, either through a LDAP control or through a HTTP header.
When enabled, the transaction IDs are created when the requests do not include one, then are logged; in addition, the server will add a sub-transaction ID control to all forwarded requests. When disabled, the incoming transaction IDs are discarded and new ones are created.
public EnumPropertyDefinition<GlobalCfgDefn.UnauthenticatedRequestsPolicy> getUnauthenticatedRequestsPolicyPropertyDefinition()
Controls how the directory server should handle requests received from a client that has not yet been authenticated, whose last authentication attempt was unsuccessful, or whose last authentication attempt used anonymous authentication.
public EnumPropertyDefinition<GlobalCfgDefn.WritabilityMode> getWritabilityModePropertyDefinition()
Specifies the kinds of write operations the directory server can process.
Copyright 2010-2022 ForgeRock AS.