{include:sjs_banner}
{toc:type=flat}
This article contains [Frequently Asked Questions|http://en.wikipedia.org/wiki/FAQ] about [Sun Java System Directory Server]. Before and after you read or search this article, see [Neil's blog|http://directoryManager.org], it is much more comprehensive than this article. Also, read the relevant portions of the official documentation, though this article is an easier way to find things, the article still refers to the official documentation for attribution and reference purposes.
Please list questions in _italic_ font and answers in *bold* font.
h1. Documentation
_Where is the Official Documentation?_
*[DSEE6 Documentation|http://docs.sun.com/app/docs/coll/1224.1]*
_Where is the C SDK?_
* [C LDAP SDK @ Mozilla | http://wiki.mozilla.org/LDAP_C_SDK]*
_nsslapd-groupevalsizelimit is not documented on docs.sun.com. What is it?_
*Introduced starting from 5.2 Patch 3, define the maximum number of members that a static group ( including members of its sub-groups ) used for acl evaluation can have. A value of -1 means infinite. Default value is 5000.*
h1. Operational Items
h2. Backups & Frozen Mode
_What is frozen mode?_
*Frozen mode (see [Backing Up|http://docs.sun.com/app/docs/doc/820-2491/6ne3dhdil?l=ru&a=view]), as distinct from read only mode, is a* *mode that the administrator can put Directory Server into. In frozen mode,*
*all operations are concluded, the configured databases (backends) are taken offline, and no operations accepted from clients*
*except searches of the configuration. Administrators use this mode to good effect to backup Directory Server databases. With ZFS,*
*the administrator can snapshot the database in a matter of seconds, then put the server back into operational mode.*
h1. Caches
[Directory Server FAQ - Caches]
h1. Security
_Is it possible to export the database and have the base64 encoded values be un-encoded?_
*No. See [RFC2849 | http://rfc.net/rfc2849.html]*
h2. SHA
h2. SSL
_Where is some information on using SSL with Directory Server?_
One of the better articles on SSL and the directory server, and using the certutil command line to manage the actual certificate DB entries directly [on directorymanager.org | http://blogs.sun.com/DirectoryManager/entry/setting_up_and_using_ssl]
h2. ACIs
h1. Database
h2. Database Checkpoint
_Can I use Veritas File System for Directory Server database filesystems?_
*Yes, but not recommended as of 01-OCT-2007. Directory Server performance can suffer during checkpoints because of the way VxFS handles fsync()*.
h2. Indexes
See the article [BDB Indexes and the Sun Java System Directory Server].
h1. Entry Management
h2. Directory Information Tree
h2. Referential Integrity
See the article [Referential Integrity].
h2. Schema
_Where is inetOrgPerson defined?_
*In [RFC2798|http://tools.ietf.org/html/rfc2798]*.
h2. Grouping Mechanisms
h3. Static Groups
_How to search for groups of which an entry is a member?_
*see [isMemberOf]
h3. Dynamic Groups
h3. Roles
h3. Class of Service
h1. Replication
* [Directory Server FAQ - Replication]
h2. Directory Server and Solaris 10
_What about Directory Server 6 and Zones?_
*Read information at [Learning Solaris | http://learningsolaris.com] *
h1. Logging
[Directory Server FAQ - Logging]
h1. Performance
_How to increase static group operation performance in Directory Server 5.2?_
*See [The Search Tune Parameter in Directory Server 5.2]*.
_How do I cap the number of persistent searches in DSEE6?_
*Use the following command:*
{noformat}
dsconf set-server-prop max-psearch-count:number
{noformat}
h1. Monitoring
_How can I tell the number of persistent searches in a DSEE6 instance?_
*Under cn=monitor, there is an attribute called currentpsearches*
h1. Contributors
Your contributions help us make the Directory Server FAQ a powerful tool for our Directory Services Infrastructure needs.
{contributors-summary}
{toc:type=flat}
This article contains [Frequently Asked Questions|http://en.wikipedia.org/wiki/FAQ] about [Sun Java System Directory Server]. Before and after you read or search this article, see [Neil's blog|http://directoryManager.org], it is much more comprehensive than this article. Also, read the relevant portions of the official documentation, though this article is an easier way to find things, the article still refers to the official documentation for attribution and reference purposes.
Please list questions in _italic_ font and answers in *bold* font.
h1. Documentation
_Where is the Official Documentation?_
*[DSEE6 Documentation|http://docs.sun.com/app/docs/coll/1224.1]*
_Where is the C SDK?_
* [C LDAP SDK @ Mozilla | http://wiki.mozilla.org/LDAP_C_SDK]*
_nsslapd-groupevalsizelimit is not documented on docs.sun.com. What is it?_
*Introduced starting from 5.2 Patch 3, define the maximum number of members that a static group ( including members of its sub-groups ) used for acl evaluation can have. A value of -1 means infinite. Default value is 5000.*
h1. Operational Items
h2. Backups & Frozen Mode
_What is frozen mode?_
*Frozen mode (see [Backing Up|http://docs.sun.com/app/docs/doc/820-2491/6ne3dhdil?l=ru&a=view]), as distinct from read only mode, is a* *mode that the administrator can put Directory Server into. In frozen mode,*
*all operations are concluded, the configured databases (backends) are taken offline, and no operations accepted from clients*
*except searches of the configuration. Administrators use this mode to good effect to backup Directory Server databases. With ZFS,*
*the administrator can snapshot the database in a matter of seconds, then put the server back into operational mode.*
h1. Caches
[Directory Server FAQ - Caches]
h1. Security
_Is it possible to export the database and have the base64 encoded values be un-encoded?_
*No. See [RFC2849 | http://rfc.net/rfc2849.html]*
h2. SHA
h2. SSL
_Where is some information on using SSL with Directory Server?_
One of the better articles on SSL and the directory server, and using the certutil command line to manage the actual certificate DB entries directly [on directorymanager.org | http://blogs.sun.com/DirectoryManager/entry/setting_up_and_using_ssl]
h2. ACIs
h1. Database
h2. Database Checkpoint
_Can I use Veritas File System for Directory Server database filesystems?_
*Yes, but not recommended as of 01-OCT-2007. Directory Server performance can suffer during checkpoints because of the way VxFS handles fsync()*.
h2. Indexes
See the article [BDB Indexes and the Sun Java System Directory Server].
h1. Entry Management
h2. Directory Information Tree
h2. Referential Integrity
See the article [Referential Integrity].
h2. Schema
_Where is inetOrgPerson defined?_
*In [RFC2798|http://tools.ietf.org/html/rfc2798]*.
h2. Grouping Mechanisms
h3. Static Groups
_How to search for groups of which an entry is a member?_
*see [isMemberOf]
h3. Dynamic Groups
h3. Roles
h3. Class of Service
h1. Replication
* [Directory Server FAQ - Replication]
h2. Directory Server and Solaris 10
_What about Directory Server 6 and Zones?_
*Read information at [Learning Solaris | http://learningsolaris.com] *
h1. Logging
[Directory Server FAQ - Logging]
h1. Performance
_How to increase static group operation performance in Directory Server 5.2?_
*See [The Search Tune Parameter in Directory Server 5.2]*.
_How do I cap the number of persistent searches in DSEE6?_
*Use the following command:*
{noformat}
dsconf set-server-prop max-psearch-count:number
{noformat}
h1. Monitoring
_How can I tell the number of persistent searches in a DSEE6 instance?_
*Under cn=monitor, there is an attribute called currentpsearches*
h1. Contributors
Your contributions help us make the Directory Server FAQ a powerful tool for our Directory Services Infrastructure needs.
{contributors-summary}