Nsds7windowsdomain, Nsds7windowsreplicasubtree, Winsyncinterval – Red Hat 8.1 User Manual
Page 74: Cn=monitor, Note, Connection
Valid Values
on | off
Default Value
Syntax
DirectoryString
Example
nsDS7NewWinUserSyncEnabled: on
2.3.9.5. nsds7WindowsDomain
This attribute sets the name of the Windows domain to which the Windows sync peer belongs.
Parameter
Description
Entry DN
cn=syncAgreementName, cn=replica,
cn=suffixDN, cn=mapping tree, cn=config
Valid Values
Any valid domain name
Default Value
Syntax
DirectoryString
Example
nsDS7WindowsDomain: DOMAINWORLD
2.3.9.6. nsds7WindowsReplicaSubtree
The suffix or DN of the Windows subtree that is being synchronized.
Parameter
Description
Entry DN
cn=syncAgreementName, cn=replica,
cn=suffixDN, cn=mapping tree, cn=config
Valid Values
Any valid suffix or subsuffix
Default Value
Syntax
DirectoryString
Example
nsDS7WindowsReplicaSubtree: cn=Users,
dc=domain, dc=com
2.3.9.7. winSyncInterval
This attribute sets how frequently, in seconds, the Directory Server polls the Windows sync peer to look
for changes in the Active Directory entries. If this entry is not set, the Directory Server checks the
Windows server every five (5) minutes, meaning the default value is 300 (300 seconds).
This value can be set lower to write Active Directory changes over to the Directory Server faster or
raised if the directory searches are taking too long.
Parameter
Description
Entry DN
cn=syncAgreementName, cn=replica,
cn=suffixDN, cn=mapping tree, cn=config
Valid Values
1 to the maximum 32-bit integer value
(2147483647)
Default Value
300
Syntax
Integer
Example
winSyncInterval: 600
2.3.10. cn=monitor
Information used to monitor the server is stored under cn=monitor. This entry and its children are
read-only; clients cannot directly modify them. The server updates this information automatically. This
section describes the cn=monitor attributes. The only attribute that can be changed by a user to set
access control is the aci attribute.
If the nsslapd-counters attribute in cn=config is set to on (the default setting), then all of the
counters kept by the Directory Server instance increment using 64-bit integers, even on 32-bit machines
or with a 32-bit version of Directory Server. For the cn=monitor entry, the 64-bit integers are used with
the opsinitiated, opscompleted, entriessent, and bytessent counters.
NOTE
The nsslapd-counters attribute enables 64-bit support for these specific database and server
counters. The counters which use 64-bit integers are not configurable; the 64-bit integers are
either enabled for all the allowed counters or disabled for all allowed counters.
connection
74
Chapter 2. Core Server Configuration Reference