4722N/A# The contents of this file are subject to the terms of the
4722N/A# Common Development and Distribution License, Version 1.0 only
4722N/A# (the "License"). You may not use this file except in compliance
4722N/A# You can obtain a copy of the license at
4722N/A# See the License for the specific language governing permissions
4722N/A# and limitations under the License.
4722N/A# When distributing Covered Code, include this CDDL HEADER in each
4722N/A# file and include the License file at
# add the following below this CDDL HEADER, with the fields enclosed
# by brackets "[]" replaced with your own identifying information:
# Portions Copyright [yyyy] [name of copyright owner]
# Portions Copyright 2006-2007 Sun Microsystems, Inc.
# This file contains the primary Directory Server configuration. It must not
# be directly edited while the server is online. The server configuration
# should only be managed using the administration utilities provided with the
objectClass: ds-cfg-root-config
ds-cfg-check-schema: true
ds-cfg-add-missing-rdn-attributes: true
ds-cfg-allow-attribute-name-exceptions: false
ds-cfg-invalid-attribute-syntax-behavior: reject
ds-cfg-single-structural-objectclass-behavior: reject
ds-cfg-notify-abandoned-operations: false
ds-cfg-proxied-authorization-identity-mapper-dn: cn=Exact Match,cn=Identity Mappers,cn=config
ds-cfg-time-limit: 60 seconds
ds-cfg-lookthrough-limit: 5000
ds-cfg-writability-mode: enabled
ds-cfg-bind-with-dn-requires-password: true
ds-cfg-reject-unauthenticated-requests: false
ds-cfg-default-password-policy: cn=Default Password Policy,cn=Password Policies,cn=config
ds-cfg-return-bind-error-messages: false
ds-cfg-idle-time-limit: 0 seconds
ds-cfg-save-config-on-successful-startup: true
dn: cn=Access Control Handler,cn=config
objectClass: ds-cfg-access-control-handler
objectClass: ds-cfg-dseecompat-access-control-handler
ds-cfg-global-aci: (extop="1.3.6.1.4.1.26027.1.6.1 || 1.3.6.1.4.1.4203.1.11.1 || 1.3.6.1.4.1.1466.20037 || 1.3.6.1.4.1.4203.1.11.3") (version 3.0; acl "Anonymous extended operation access"; allow(read) userdn="ldap:///anyone";)
ds-cfg-global-aci: (targetcontrol="2.16.840.1.113730.3.4.2 || 2.16.840.1.113730.3.4.17 || 2.16.840.1.113730.3.4.19 || 1.3.6.1.4.1.4203.1.10.2 || 1.3.6.1.4.1.42.2.27.8.5.1 || 2.16.840.1.113730.3.4.16") (version 3.0; acl "Anonymous control access"; allow(read) userdn="ldap:///anyone";)
ds-cfg-global-aci: (targetattr!="userPassword||authPassword")(version 3.0; acl "Anonymous read access"; allow (read,search,compare) userdn="ldap:///anyone";)
ds-cfg-global-aci: (targetattr="*")(version 3.0; acl "Self entry modification"; allow (write) userdn="ldap:///self";)
ds-cfg-global-aci: (target="ldap:///cn=schema")(targetscope="base")(targetattr="attributeTypes||dITContentRules||dITStructureRules||ldapSyntaxes||matchingRules||matchingRuleUse||nameForms||objectClasses")(version 3.0; acl "User-Visible Schema Operational Attributes"; allow (read,search,compare) userdn="ldap:///anyone";)
ds-cfg-global-aci: (target="ldap:///")(targetscope="base")(targetattr="namingContexts||supportedAuthPasswordSchemes||supportedControl||supportedExtension||supportedFeatures||supportedSASLMechanisms||vendorName||vendorVersion")(version 3.0; acl "User-Visible Root DSE Operational Attributes"; allow (read,search,compare) userdn="ldap:///anyone";)
ds-cfg-global-aci: (targetattr="createTimestamp||creatorsName||modifiersName||modifyTimestamp||entryDN||entryUUID||subschemaSubentry")(version 3.0; acl "User-Visible Operational Attributes"; allow (read,search,compare) userdn="ldap:///anyone";)
cn: Access Control Handler
ds-cfg-acl-handler-enabled: true
dn: cn=Crypto Manager,cn=config
objectClass: ds-cfg-crypto-manager
ds-cfg-ssl-cert-nickname: ads-certificate
ds-cfg-ssl-encryption: false
dn: cn=Account Status Notification Handlers,cn=config
objectClass: ds-cfg-branch
cn: Account Status Notification Handlers
dn: cn=Error Log Handler,cn=Account Status Notification Handlers,cn=config
objectClass: ds-cfg-account-status-notification-handler
objectClass: ds-cfg-error-log-account-status-notification-handler
ds-cfg-account-status-notification-handler-enabled: true
ds-cfg-account-status-notification-type: account-temporarily-locked
ds-cfg-account-status-notification-type: account-permanently-locked
ds-cfg-account-status-notification-type: account-unlocked
ds-cfg-account-status-notification-type: account-idle-locked
ds-cfg-account-status-notification-type: account-reset-locked
ds-cfg-account-status-notification-type: account-disabled
ds-cfg-account-status-notification-type: account-enabled
ds-cfg-account-status-notification-type: account-expired
ds-cfg-account-status-notification-type: password-expired
ds-cfg-account-status-notification-type: password-expiring
ds-cfg-account-status-notification-type: password-reset
ds-cfg-account-status-notification-type: password-changed
dn: cn=SMTP Handler,cn=Account Status Notification Handlers,cn=config
objectClass: ds-cfg-account-status-notification-handler
objectClass: ds-cfg-smtp-account-status-notification-handler
ds-cfg-account-status-notification-handler-enabled: false
ds-cfg-sender-address: opends-notifications@example.com
ds-cfg-email-address-attribute-type: mail
ds-cfg-send-notification-without-end-user-address: false
ds-cfg-message-subject: account-temporarily-locked:Your directory account has been locked
ds-cfg-message-subject: account-permanently-locked:Your directory account has been locked
ds-cfg-message-subject: account-unlocked:Your directory account has been unlocked
ds-cfg-message-subject: account-idle-locked:Your directory account has been locked
ds-cfg-message-subject: account-reset-locked:Your directory account has been locked
ds-cfg-message-subject: account-disabled:Your directory account has been disabled
ds-cfg-message-subject: account-enabled:Your directory account has been re-enabled
ds-cfg-message-subject: account-expired:Your directory account has expired
ds-cfg-message-subject: password-expired:Your directory password has expired
ds-cfg-message-subject: password-expiring:Your directory password is going to expire
ds-cfg-message-subject: password-reset:Your directory password has been reset
ds-cfg-message-subject: password-changed:Your directory password has been changed
dn: cn=Alert Handlers,cn=config
objectClass: ds-cfg-branch
dn: cn=JMX Alert Handler,cn=Alert Handlers,cn=config
objectClass: ds-cfg-alert-handler
objectClass: ds-cfg-jmx-alert-handler
ds-cfg-alert-handler-enabled: false
dn: cn=Backends,cn=config
objectClass: ds-cfg-branch
dn: ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-backend
objectClass: ds-cfg-je-backend
ds-cfg-backend-enabled: true
ds-cfg-backend-id: userRoot
ds-cfg-backend-writability-mode: enabled
ds-cfg-backend-base-dn: dc=example,dc=com
ds-cfg-backend-directory: db
ds-cfg-backend-index-entry-limit: 4000
ds-cfg-backend-subtree-delete-size-limit: 100000
ds-cfg-backend-subtree-delete-batch-size: 5000
ds-cfg-backend-preload-time-limit: 0 seconds
ds-cfg-backend-import-temp-directory: importTmp
ds-cfg-backend-import-buffer-size: 256 megabytes
ds-cfg-backend-import-queue-size: 100
ds-cfg-backend-import-pass-size: 0
ds-cfg-backend-import-thread-count: 8
ds-cfg-backend-entries-compressed: false
ds-cfg-backend-deadlock-retry-limit: 10
ds-cfg-backend-compact-encoding: true
ds-cfg-database-cache-percent: 10
ds-cfg-database-cache-size: 0 megabytes
ds-cfg-database-txn-no-sync: false
ds-cfg-database-txn-write-no-sync: true
ds-cfg-database-run-cleaner: true
ds-cfg-database-cleaner-num-threads: 1
ds-cfg-database-cleaner-min-utilization: 75
ds-cfg-database-evictor-lru-only: true
ds-cfg-database-evictor-nodes-per-scan: 10
ds-cfg-database-log-file-max: 50 megabytes
ds-cfg-database-logging-file-handler-on: true
ds-cfg-database-logging-level: CONFIG
ds-cfg-database-checkpointer-bytes-interval: 20 megabytes
ds-cfg-database-checkpointer-wakeup-interval: 30 seconds
ds-cfg-database-lock-num-lock-tables: 19
dn: cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-branch
dn: ds-cfg-index-attribute=aci,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: aci
ds-cfg-index-type: presence
dn: ds-cfg-index-attribute=cn,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: cn
ds-cfg-index-type: presence
ds-cfg-index-type: equality
ds-cfg-index-type: substring
dn: ds-cfg-index-attribute=ds-sync-hist,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: ds-sync-hist
ds-cfg-index-type: ordering
dn: ds-cfg-index-attribute=entryUUID,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: entryUUID
ds-cfg-index-type: equality
dn: ds-cfg-index-attribute=givenName,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: givenName
ds-cfg-index-type: presence
ds-cfg-index-type: equality
ds-cfg-index-type: substring
dn: ds-cfg-index-attribute=mail,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: mail
ds-cfg-index-type: presence
ds-cfg-index-type: equality
ds-cfg-index-type: substring
dn: ds-cfg-index-attribute=member,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: member
ds-cfg-index-type: equality
dn: ds-cfg-index-attribute=objectClass,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: objectClass
ds-cfg-index-type: equality
dn: ds-cfg-index-attribute=sn,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: sn
ds-cfg-index-type: presence
ds-cfg-index-type: equality
ds-cfg-index-type: substring
dn: ds-cfg-index-attribute=telephoneNumber,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: telephoneNumber
ds-cfg-index-type: presence
ds-cfg-index-type: equality
ds-cfg-index-type: substring
dn: ds-cfg-index-attribute=uid,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: uid
ds-cfg-index-type: equality
dn: ds-cfg-index-attribute=uniqueMember,cn=Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-je-index
ds-cfg-index-attribute: uniqueMember
ds-cfg-index-type: equality
dn: cn=VLV Index,ds-cfg-backend-id=userRoot,cn=Backends,cn=config
objectClass: ds-cfg-branch
dn: ds-cfg-backend-id=backup,cn=Backends,cn=config
objectClass: ds-cfg-backend
objectClass: ds-cfg-backup-backend
ds-cfg-backend-enabled: true
ds-cfg-backend-id: backup
ds-cfg-backend-writability-mode: disabled
ds-cfg-backend-base-dn: cn=backups
ds-cfg-backup-directory: bak
dn: ds-cfg-backend-id=config,cn=Backends,cn=config
objectClass: ds-cfg-backend
objectClass: ds-cfg-config-file-handler-backend
ds-cfg-backend-enabled: true
ds-cfg-backend-id: config
ds-cfg-backend-writability-mode: enabled
ds-cfg-backend-base-dn: cn=config
dn: ds-cfg-backend-id=ads-truststore,cn=Backends,cn=config
objectClass: ds-cfg-backend
objectClass: ds-cfg-trust-store-backend
ds-cfg-backend-id: ads-truststore
ds-cfg-backend-enabled: true
ds-cfg-backend-writability-mode: enabled
ds-cfg-backend-base-dn: cn=trust-store
ds-cfg-trust-store-type: JKS
dn: ds-cfg-backend-id=monitor,cn=Backends,cn=config
objectClass: ds-cfg-backend
objectClass: ds-cfg-monitor-backend
ds-cfg-backend-enabled: true
ds-cfg-backend-id: monitor
ds-cfg-backend-writability-mode: disabled
ds-cfg-backend-base-dn: cn=monitor
dn: ds-cfg-backend-id=schema,cn=Backends,cn=config
objectClass: ds-cfg-backend
objectClass: ds-cfg-schema-backend
ds-cfg-backend-enabled: true
ds-cfg-backend-id: schema
ds-cfg-backend-writability-mode: enabled
ds-cfg-backend-base-dn: cn=schema
ds-cfg-show-all-attributes: false
dn: ds-cfg-backend-id=tasks,cn=Backends,cn=config
objectClass: ds-cfg-backend
objectClass: ds-cfg-task-backend
ds-cfg-backend-enabled: true
ds-cfg-backend-writability-mode: enabled
ds-cfg-backend-base-dn: cn=tasks
ds-cfg-task-retention-time: 24 hours
dn: cn=Certificate Mappers,cn=config
objectClass: ds-cfg-branch
dn: cn=Subject Equals DN,cn=Certificate Mappers,cn=config
objectClass: ds-cfg-certificate-mapper
objectClass: ds-cfg-subject-equals-dn-certificate-mapper
ds-cfg-certificate-mapper-enabled: true
dn: cn=Subject DN to User Attribute,cn=Certificate Mappers,cn=config
objectClass: ds-cfg-certificate-mapper
objectClass: ds-cfg-subject-dn-to-user-attribute-certificate-mapper
cn: Subject DN to User Attribute
ds-cfg-certificate-mapper-enabled: true
ds-cfg-certificate-subject-attribute-type: ds-certificate-subject-dn
dn: cn=Subject Attribute to User Attribute,cn=Certificate Mappers,cn=config
objectClass: ds-cfg-certificate-mapper
objectClass: ds-cfg-subject-attribute-to-user-attribute-certificate-mapper
cn: Subject Attribute to User Attribute
ds-cfg-certificate-mapper-enabled: true
ds-cfg-certificate-subject-attribute-mapping: cn:cn
ds-cfg-certificate-subject-attribute-mapping: e:mail
dn: cn=Fingerprint Mapper,cn=Certificate Mappers,cn=config
objectClass: ds-cfg-certificate-mapper
objectClass: ds-cfg-fingerprint-certificate-mapper
ds-cfg-certificate-mapper-enabled: true
ds-cfg-certificate-fingerprint-attribute-type: ds-certificate-fingerprint
ds-cfg-certificate-fingerprint-algorithm: MD5
dn: cn=Connection Handlers,cn=config
objectClass: ds-cfg-branch
dn: cn=LDAP Connection Handler,cn=Connection Handlers,cn=config
objectClass: ds-cfg-connection-handler
objectClass: ds-cfg-ldap-connection-handler
cn: LDAP Connection Handler
ds-cfg-connection-handler-enabled: true
ds-cfg-listen-address: 0.0.0.0
ds-cfg-accept-backlog: 128
ds-cfg-allow-ldapv2: true
ds-cfg-use-tcp-keepalive: true
ds-cfg-use-tcp-nodelay: true
ds-cfg-allow-tcp-reuse-address: true
ds-cfg-send-rejection-notice: true
ds-cfg-max-request-size: 5 megabytes
ds-cfg-max-blocked-write-time-limit: 2 minutes
ds-cfg-num-request-handlers: 2
ds-cfg-allow-start-tls: false
ds-cfg-ssl-client-auth-policy: optional
ds-cfg-ssl-cert-nickname: server-cert
dn: cn=LDAPS Connection Handler,cn=Connection Handlers,cn=config
objectClass: ds-cfg-connection-handler
objectClass: ds-cfg-ldap-connection-handler
cn: LDAPS Connection Handler
ds-cfg-connection-handler-enabled: false
ds-cfg-listen-address: 0.0.0.0
ds-cfg-accept-backlog: 128
ds-cfg-allow-ldapv2: true
ds-cfg-use-tcp-keepalive: true
ds-cfg-use-tcp-nodelay: true
ds-cfg-allow-tcp-reuse-address: true
ds-cfg-send-rejection-notice: true
ds-cfg-max-request-size: 5 megabytes
ds-cfg-max-blocked-write-time-limit: 2 minutes
ds-cfg-num-request-handlers: 2
ds-cfg-allow-start-tls: false
ds-cfg-ssl-client-auth-policy: optional
ds-cfg-ssl-cert-nickname: server-cert
ds-cfg-key-manager-provider-dn: cn=JKS,cn=Key Manager Providers,cn=config
ds-cfg-trust-manager-provider-dn: cn=JKS,cn=Trust Manager Providers,cn=config
dn: cn=JMX Connection Handler,cn=Connection Handlers,cn=config
objectClass: ds-cfg-connection-handler
objectClass: ds-cfg-jmx-connection-handler
cn: JMX Connection Handler
ds-cfg-connection-handler-enabled: false
ds-cfg-ssl-cert-nickname: server-cert
dn: cn=Entry Cache,cn=config
objectClass: ds-cfg-entry-cache
objectClass: ds-cfg-soft-reference-entry-cache
ds-cfg-entry-cache-enabled: false
dn: cn=Extended Operations,cn=config
objectClass: ds-cfg-branch
dn: cn=Cancel,cn=Extended Operations,cn=config
objectClass: ds-cfg-extended-operation-handler
objectClass: ds-cfg-cancel-extended-operation-handler
ds-cfg-extended-operation-handler-enabled: true
dn: cn=Get Connection ID,cn=Extended Operations,cn=config
objectClass: ds-cfg-extended-operation-handler
objectClass: ds-cfg-get-connection-id-extended-operation-handler
ds-cfg-extended-operation-handler-enabled: true
dn: cn=Password Modify,cn=Extended Operations,cn=config
objectClass: ds-cfg-extended-operation-handler
objectClass: ds-cfg-password-modify-extended-operation-handler
ds-cfg-extended-operation-handler-enabled: true
ds-cfg-identity-mapper-dn: cn=Exact Match,cn=Identity Mappers,cn=config
dn: cn=Password Policy State,cn=Extended Operations,cn=config
objectClass: ds-cfg-extended-operation-handler
objectClass: ds-cfg-password-policy-state-extended-operation-handler
cn: Password Policy State
ds-cfg-extended-operation-handler-enabled: true
dn: cn=StartTLS,cn=Extended Operations,cn=config
objectClass: ds-cfg-extended-operation-handler
objectClass: ds-cfg-starttls-extended-operation-handler
ds-cfg-extended-operation-handler-enabled: true
dn: cn=Who Am I,cn=Extended Operations,cn=config
objectClass: ds-cfg-extended-operation-handler
objectClass: ds-cfg-who-am-i-extended-operation-handler
ds-cfg-extended-operation-handler-enabled: true
dn: cn=Group Implementations,cn=config
objectClass: ds-cfg-branch
cn: Group Implementations
dn: cn=Dynamic,cn=Group Implementations,cn=config
objectClass: ds-cfg-group-implementation
objectClass: ds-cfg-dynamic-group-implementation
ds-cfg-group-implementation-enabled: true
dn: cn=Static,cn=Group Implementations,cn=config
objectClass: ds-cfg-group-implementation
objectClass: ds-cfg-static-group-implementation
ds-cfg-group-implementation-enabled: true
dn: cn=Virtual Static,cn=Group Implementations,cn=config
objectClass: ds-cfg-group-implementation
objectClass: ds-cfg-virtual-static-group-implementation
ds-cfg-group-implementation-enabled: true
dn: cn=Identity Mappers,cn=config
objectClass: ds-cfg-branch
dn: cn=Exact Match,cn=Identity Mappers,cn=config
objectClass: ds-cfg-identity-mapper
objectClass: ds-cfg-exact-match-identity-mapper
ds-cfg-identity-mapper-enabled: true
ds-cfg-match-attribute: uid
dn: cn=Regular Expression,cn=Identity Mappers,cn=config
objectClass: ds-cfg-identity-mapper
objectClass: ds-cfg-regular-expression-identity-mapper
ds-cfg-identity-mapper-enabled: true
ds-cfg-match-attribute: uid
ds-cfg-match-pattern: ^([^@]+)@.+$
ds-cfg-replace-pattern: $1
dn: cn=Key Manager Providers,cn=config
objectClass: ds-cfg-branch
cn: Key Manager Providers
dn: cn=JKS,cn=Key Manager Providers,cn=config
objectClass: ds-cfg-key-manager-provider
objectClass: ds-cfg-file-based-key-manager-provider
ds-cfg-key-manager-provider-enabled: false
ds-cfg-key-store-type: JKS
dn: cn=PKCS12,cn=Key Manager Providers,cn=config
objectClass: ds-cfg-key-manager-provider
objectClass: ds-cfg-file-based-key-manager-provider
ds-cfg-key-manager-provider-enabled: false
ds-cfg-key-store-type: PKCS12
dn: cn=PKCS11,cn=Key Manager Providers,cn=config
objectClass: ds-cfg-key-manager-provider
objectClass: ds-cfg-pkcs11-key-manager-provider
ds-cfg-key-manager-provider-enabled: false
objectClass: ds-cfg-branch
dn: cn=File-Based Access Logger,cn=Loggers,cn=config
objectClass: ds-cfg-logger
objectClass: ds-cfg-access-logger
objectClass: ds-cfg-file-based-access-logger
cn: File-Based Access Logger
ds-cfg-logger-enabled: true
ds-cfg-log-file-mode: 640
ds-cfg-suppress-internal-operations: true
ds-cfg-suppress-synchronization-operations: false
ds-cfg-asynchronous-writes: true
ds-cfg-rotation-policy-dn: cn=24 Hours Time Limit Rotation Policy,cn=Log Rotation Policies,cn=config
ds-cfg-rotation-policy-dn: cn=Size Limit Rotation Policy,cn=Log Rotation Policies,cn=config
ds-cfg-retention-policy-dn: cn=File Count Retention Policy,cn=Log Retention Policies,cn=config
dn: cn=File-Based Audit Logger,cn=Loggers,cn=config
objectClass: ds-cfg-logger
objectClass: ds-cfg-access-logger
objectClass: ds-cfg-file-based-access-logger
cn: File-Based Audit Logger
ds-cfg-logger-enabled: false
ds-cfg-log-file-mode: 640
ds-cfg-suppress-internal-operations: true
ds-cfg-suppress-synchronization-operations: false
ds-cfg-asynchronous-writes: true
ds-cfg-rotation-policy-dn: cn=24 Hours Time Limit Rotation Policy,cn=Log Rotation Policies,cn=config
ds-cfg-rotation-policy-dn: cn=Size Limit Rotation Policy,cn=Log Rotation Policies,cn=config
ds-cfg-retention-policy-dn: cn=File Count Retention Policy,cn=Log Retention Policies,cn=config
dn: cn=File-Based Error Logger,cn=Loggers,cn=config
objectClass: ds-cfg-logger
objectClass: ds-cfg-error-logger
objectClass: ds-cfg-file-based-error-logger
cn: File-Based Error Logger
ds-cfg-logger-enabled: true
ds-cfg-log-file-mode: 640
ds-cfg-default-severity: severe-warning
ds-cfg-default-severity: severe-error
ds-cfg-default-severity: fatal-error
ds-cfg-default-severity: notice
ds-cfg-asynchronous-writes: false
ds-cfg-rotation-policy-dn: cn=7 Days Time Limit Rotation Policy,cn=Log Rotation Policies,cn=config
ds-cfg-rotation-policy-dn: cn=Size Limit Rotation Policy,cn=Log Rotation Policies,cn=config
ds-cfg-retention-policy-dn: cn=File Count Retention Policy,cn=Log Retention Policies,cn=config
dn: cn=Replication Repair Logger,cn=Loggers,cn=config
objectClass: ds-cfg-logger
objectClass: ds-cfg-error-logger
objectClass: ds-cfg-file-based-error-logger
cn: File-Based Error Logger
ds-cfg-logger-enabled: true
ds-cfg-log-file-mode: 640
ds-cfg-default-severity: none
ds-cfg-override-severity: SYNC=INFO,MILD_ERROR,MILD_WARNING,NOTICE
ds-cfg-asynchronous-writes: false
ds-cfg-rotation-policy-dn: cn=7 Days Time Limit Rotation Policy,cn=Log Rotation Policies,cn=config
ds-cfg-rotation-policy-dn: cn=Size Limit Rotation Policy,cn=Log Rotation Policies,cn=config
ds-cfg-retention-policy-dn: cn=File Count Retention Policy,cn=Log Retention Policies,cn=config
dn: cn=File-Based Debug Logger,cn=Loggers,cn=config
objectClass: ds-cfg-logger
objectClass: ds-cfg-debug-logger
objectClass: ds-cfg-file-based-debug-logger
cn: File-Based Debug Logger
ds-cfg-logger-enabled: false
ds-cfg-log-file-mode: 640
ds-cfg-default-debug-level: error
ds-cfg-asynchronous-writes: false
dn: cn=Log Rotation Policies,cn=config
objectClass: ds-cfg-branch
cn: Log Rotation Policies
dn: cn=24 Hours Time Limit Rotation Policy,cn=Log Rotation Policies,cn=config
objectClass: ds-cfg-log-rotation-policy
objectClass: ds-cfg-time-limit-log-rotation-policy
cn: Time Limit Rotation Policy
ds-cfg-rotation-interval: 24 hours
dn: cn=7 Days Time Limit Rotation Policy,cn=Log Rotation Policies,cn=config
objectClass: ds-cfg-log-rotation-policy
objectClass: ds-cfg-time-limit-log-rotation-policy
cn: Time Limit Rotation Policy
ds-cfg-rotation-interval: 7 days
dn: cn=Size Limit Rotation Policy,cn=Log Rotation Policies,cn=config
objectClass: ds-cfg-log-rotation-policy
objectClass: ds-cfg-size-limit-log-rotation-policy
cn: Size Limit Rotation Policy
ds-cfg-file-size-limit: 100 megabytes
dn: cn=Fixed Time Rotation Policy,cn=Log Rotation Policies,cn=config
objectClass: ds-cfg-log-rotation-policy
objectClass: ds-cfg-fixed-time-log-rotation-policy
cn: Fixed Time Rotation Policy
dn: cn=Log Retention Policies,cn=config
objectClass: ds-cfg-branch
cn: Log Retention Policies
dn: cn=File Count Retention Policy,cn=Log Retention Policies,cn=config
objectClass: ds-cfg-log-retention-policy
objectClass: ds-cfg-file-count-log-retention-policy
cn: File Count Retention Policy
ds-cfg-number-of-files: 10
dn: cn=Free Disk Space Retention Policy,cn=Log Retention Policies,cn=config
objectClass: ds-cfg-log-retention-policy
objectClass: ds-cfg-free-disk-space-log-retention-policy
cn: Free Disk Space Retention Policy
ds-cfg-free-disk-space: 500 megabytes
dn: cn=Size Limit Retention Policy,cn=Log Retention Policies,cn=config
objectClass: ds-cfg-log-retention-policy
objectClass: ds-cfg-size-limit-log-retention-policy
cn: Size Limit Retention Policy
ds-cfg-disk-space-used: 500 megabytes
dn: cn=Matching Rules,cn=config
objectClass: ds-cfg-branch
dn: cn=Auth Password Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Auth Password Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Auth Password Exact Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Auth Password Exact Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Bit String Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Bit String Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Boolean Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Boolean Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Exact Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Case Exact Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Exact Ordering Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-ordering-matching-rule
cn: Case Exact Ordering Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Exact Substring Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-substring-matching-rule
cn: Case Exact Substring Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Exact IA5 Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Case Exact IA5 Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Exact IA5 Substring Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-substring-matching-rule
cn: Case Exact IA5 Substring Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Ignore Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Case Ignore Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Ignore Ordering Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-ordering-matching-rule
cn: Case Ignore Ordering Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Ignore Substring Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-substring-matching-rule
cn: Case Ignore Substring Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Ignore IA5 Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Case Ignore IA5 Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Ignore IA5 Substring Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-substring-matching-rule
cn: Case Ignore IA5 Substring Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Ignore List Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Case Ignore List Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Case Ignore List Substring Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-substring-matching-rule
cn: Case Ignore List Substring Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Directory String First Component Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Directory String First Component Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Distinguished Name Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Distinguished Name Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Double Metaphone Approximate Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-approximate-matching-rule
cn: Double Metaphone Approximate Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Generalized Time Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Generalized Time Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Generalized Time Ordering Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-ordering-matching-rule
cn: Generalized Time Ordering Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Historical CSN Ordering Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-ordering-matching-rule
objectClass: ds-cfg-matching-rule
ds-cfg-matching-rule-enabled: true
cn: Historical CSN Ordering Matching Rule
dn: cn=Integer Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Integer Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Integer Ordering Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-ordering-matching-rule
cn: Integer Ordering Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Integer First Component Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Integer First Component Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Keyword Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Keyword Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Numeric String Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Numeric String Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Numeric String Ordering Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-ordering-matching-rule
cn: Numeric String Ordering Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Numeric String Substring Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-substring-matching-rule
cn: Numeric String Substring Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Object Identifier Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Object Identifier Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Object Identifier First Component Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Object Identifier First Component Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Octet String Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Octet String Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Octet String Ordering Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-ordering-matching-rule
cn: Octet String Ordering Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Octet String Substring Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-substring-matching-rule
cn: Octet String Substring Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Presentation Address Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Presentation Address Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Protocol Information Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Protocol Information Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Telephone Number Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Telephone Number Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Telephone Number Substring Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-substring-matching-rule
cn: Telephone Number Substring Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Unique Member Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Unique Member Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=User Password Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: User Password Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=User Password Exact Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: User Password Exact Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=UUID Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: UUID Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=UUID Ordering Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-ordering-matching-rule
cn: UUID Ordering Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Word Equality Matching Rule,cn=Matching Rules,cn=config
objectClass: ds-cfg-matching-rule
objectClass: ds-cfg-equality-matching-rule
cn: Word Equality Matching Rule
ds-cfg-matching-rule-enabled: true
dn: cn=Monitor Providers,cn=config
objectClass: ds-cfg-branch
dn: cn=Client Connections,cn=Monitor Providers,cn=config
objectClass: ds-cfg-monitor-provider
objectClass: ds-cfg-client-connection-monitor-provider
ds-cfg-monitor-provider-enabled: true
dn: cn=JVM Stack Trace,cn=Monitor Providers,cn=config
objectClass: ds-cfg-monitor-provider
objectClass: ds-cfg-stack-trace-monitor-provider
ds-cfg-monitor-provider-enabled: true
dn: cn=System Info,cn=Monitor Providers,cn=config
objectClass: ds-cfg-monitor-provider
objectClass: ds-cfg-system-info-monitor-provider
ds-cfg-monitor-provider-enabled: true
dn: cn=Version,cn=Monitor Providers,cn=config
objectClass: ds-cfg-monitor-provider
objectClass: ds-cfg-version-monitor-provider
ds-cfg-monitor-provider-enabled: true
dn: cn=Password Generators,cn=config
objectClass: ds-cfg-branch
dn: cn=Random Password Generator,cn=Password Generators,cn=config
objectClass: ds-cfg-password-generator
objectClass: ds-cfg-random-password-generator
cn: Random Password Generator
ds-cfg-password-generator-enabled: true
ds-cfg-password-character-set: alpha:abcdefghijklmnopqrstuvwxyz
ds-cfg-password-character-set: numeric:0123456789
ds-cfg-password-format: alpha:3,numeric:2,alpha:3
dn: cn=Password Policies,cn=config
objectClass: ds-cfg-branch
dn: cn=Default Password Policy,cn=Password Policies,cn=config
objectClass: ds-cfg-password-policy
cn: Default Password Policy
ds-cfg-password-attribute: userPassword
ds-cfg-default-password-storage-scheme: SSHA
ds-cfg-allow-expired-password-changes: false
ds-cfg-allow-multiple-password-values: false
ds-cfg-allow-pre-encoded-passwords: false
ds-cfg-allow-user-password-changes: true
ds-cfg-expire-passwords-without-warning: false
ds-cfg-force-change-on-add: false
ds-cfg-force-change-on-reset: false
ds-cfg-grace-login-count: 0
ds-cfg-idle-lockout-interval: 0 seconds
ds-cfg-lockout-failure-count: 0
ds-cfg-lockout-duration: 0 seconds
ds-cfg-lockout-failure-expiration-interval: 0 seconds
ds-cfg-minimum-password-age: 0 seconds
ds-cfg-maximum-password-age: 0 seconds
ds-cfg-maximum-password-reset-age: 0 seconds
ds-cfg-password-expiration-warning-interval: 5 days
ds-cfg-password-generator-dn: cn=Random Password Generator,cn=Password Generators,cn=config
ds-cfg-password-change-requires-current-password: false
ds-cfg-require-secure-authentication: false
ds-cfg-require-secure-password-changes: false
ds-cfg-skip-validation-for-administrators: false
ds-cfg-state-update-failure-policy: reactive
ds-cfg-password-history-count: 0
ds-cfg-password-history-duration: 0 seconds
dn: cn=Root Password Policy,cn=Password Policies,cn=config
objectClass: ds-cfg-password-policy
ds-cfg-password-attribute: userPassword
ds-cfg-default-password-storage-scheme: SSHA512
ds-cfg-allow-expired-password-changes: false
ds-cfg-allow-multiple-password-values: false
ds-cfg-allow-pre-encoded-passwords: false
ds-cfg-allow-user-password-changes: true
ds-cfg-expire-passwords-without-warning: false
ds-cfg-force-change-on-add: false
ds-cfg-force-change-on-reset: false
ds-cfg-grace-login-count: 0
ds-cfg-idle-lockout-interval: 0 seconds
ds-cfg-lockout-failure-count: 0
ds-cfg-lockout-duration: 0 seconds
ds-cfg-lockout-failure-expiration-interval: 0 seconds
ds-cfg-minimum-password-age: 0 seconds
ds-cfg-maximum-password-age: 0 seconds
ds-cfg-maximum-password-reset-age: 0 seconds
ds-cfg-password-expiration-warning-interval: 5 days
ds-cfg-password-change-requires-current-password: true
ds-cfg-require-secure-authentication: false
ds-cfg-require-secure-password-changes: false
ds-cfg-skip-validation-for-administrators: false
ds-cfg-state-update-failure-policy: ignore
ds-cfg-password-history-count: 0
ds-cfg-password-history-duration: 0 seconds
dn: cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-branch
cn: Password Storage Schemes
dn: cn=Base64,cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-password-storage-scheme
objectClass: ds-cfg-base64-password-storage-scheme
ds-cfg-password-storage-scheme-enabled: true
dn: cn=Clear,cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-password-storage-scheme
objectClass: ds-cfg-clear-password-storage-scheme
ds-cfg-password-storage-scheme-enabled: true
dn: cn=CRYPT,cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-password-storage-scheme
objectClass: ds-cfg-crypt-password-storage-scheme
ds-cfg-password-storage-scheme-enabled: true
dn: cn=MD5,cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-password-storage-scheme
objectClass: ds-cfg-md5-password-storage-scheme
ds-cfg-password-storage-scheme-enabled: true
dn: cn=Salted MD5,cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-password-storage-scheme
objectClass: ds-cfg-salted-md5-password-storage-scheme
ds-cfg-password-storage-scheme-enabled: true
dn: cn=Salted SHA-1,cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-password-storage-scheme
objectClass: ds-cfg-salted-sha1-password-storage-scheme
ds-cfg-password-storage-scheme-enabled: true
dn: cn=Salted SHA-256,cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-password-storage-scheme
objectClass: ds-cfg-salted-sha256-password-storage-scheme
ds-cfg-password-storage-scheme-enabled: true
dn: cn=Salted SHA-384,cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-password-storage-scheme
objectClass: ds-cfg-salted-sha384-password-storage-scheme
ds-cfg-password-storage-scheme-enabled: true
dn: cn=Salted SHA-512,cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-password-storage-scheme
objectClass: ds-cfg-salted-sha512-password-storage-scheme
ds-cfg-password-storage-scheme-enabled: true
dn: cn=SHA-1,cn=Password Storage Schemes,cn=config
objectClass: ds-cfg-password-storage-scheme
objectClass: ds-cfg-sha1-password-storage-scheme
ds-cfg-password-storage-scheme-enabled: true
dn: cn=Password Validators,cn=config
objectClass: ds-cfg-branch
dn: cn=Attribute Value,cn=Password Validators,cn=config
objectClass: ds-cfg-password-validator
objectClass: ds-cfg-attribute-value-password-validator
ds-cfg-password-validator-enabled: true
ds-cfg-test-reversed-password: true
dn: cn=Character Set,cn=Password Validators,cn=config
objectClass: ds-cfg-password-validator
objectClass: ds-cfg-character-set-password-validator
ds-cfg-password-validator-enabled: true
ds-cfg-character-set: 1:abcdefghijklmnopqrstuvwxyz
ds-cfg-character-set: 1:ABCDEFGHIJKLMNOPQRSTUVWXYZ
ds-cfg-character-set: 1:0123456789
ds-cfg-character-set: 1:~!@#$%^&*()-_=+[]{}|;:,.<>/?
ds-cfg-allow-unclassified-characters: true
dn: cn=Dictionary,cn=Password Validators,cn=config
objectClass: ds-cfg-password-validator
objectClass: ds-cfg-dictionary-password-validator
ds-cfg-password-validator-enabled: false
ds-cfg-case-sensitive-validation: false
ds-cfg-test-reversed-password: true
dn: cn=Length-Based Password Validator,cn=Password Validators,cn=config
objectClass: ds-cfg-password-validator
objectClass: ds-cfg-length-based-password-validator
cn: Length-Based Password Validator
ds-cfg-password-validator-enabled: true
ds-cfg-minimum-password-length: 6
ds-cfg-maximum-password-length: 0
dn: cn=Repeated Characters,cn=Password Validators,cn=config
objectClass: ds-cfg-password-validator
objectClass: ds-cfg-repeated-characters-password-validator
ds-cfg-password-validator-enabled: true
ds-cfg-maximum-consecutive-length: 2
ds-cfg-case-sensitive-validation: false
dn: cn=Similarity-Based Password Validator,cn=Password Validators,cn=config
objectClass: ds-cfg-password-validator
objectClass: ds-cfg-similarity-based-password-validator
cn: Similarity-Based Password Validator
ds-cfg-password-validator-enabled: true
ds-cfg-minimum-password-difference: 3
dn: cn=Unique Characters,cn=Password Validators,cn=config
objectClass: ds-cfg-password-validator
objectClass: ds-cfg-unique-characters-password-validator
ds-cfg-password-validator-enabled: true
ds-cfg-minimum-unique-characters: 5
ds-cfg-case-sensitive-validation: false
objectClass: ds-cfg-branch
objectClass: ds-cfg-plugin-root
dn: cn=Entry UUID,cn=Plugins,cn=config
objectClass: ds-cfg-plugin
objectClass: ds-cfg-entryuuid-plugin
ds-cfg-plugin-enabled: true
ds-cfg-plugin-type: ldifImport
ds-cfg-plugin-type: preOperationAdd
dn: cn=LastMod,cn=Plugins,cn=config
objectClass: ds-cfg-plugin
objectClass: ds-cfg-lastmod-plugin
ds-cfg-plugin-enabled: true
ds-cfg-plugin-type: preOperationAdd
ds-cfg-plugin-type: preOperationModify
ds-cfg-plugin-type: preOperationModifyDN
dn: cn=LDAP Attribute Description List,cn=Plugins,cn=config
objectClass: ds-cfg-plugin
objectClass: ds-cfg-ldap-ad-list-plugin
cn: LDAP Attribute Description List
ds-cfg-plugin-enabled: true
ds-cfg-plugin-type: preParseSearch
dn: cn=Password Policy Import,cn=Plugins,cn=config
objectClass: ds-cfg-plugin
objectClass: ds-cfg-password-policy-import-plugin
cn: Password Policy Import
ds-cfg-plugin-enabled: true
ds-cfg-plugin-type: ldifImport
dn: cn=Profiler,cn=Plugins,cn=config
objectClass: ds-cfg-plugin
objectClass: ds-cfg-profiler-plugin
ds-cfg-plugin-enabled: true
ds-cfg-plugin-type: startup
ds-cfg-enable-profiling-on-startup: false
ds-cfg-profile-directory: logs
ds-cfg-profile-sample-interval: 10 milliseconds
dn: cn=UID Unique Attribute,cn=Plugins,cn=config
objectClass: ds-cfg-plugin
objectClass: ds-cfg-unique-attribute-plugin
ds-cfg-plugin-enabled: false
ds-cfg-plugin-type: preOperationAdd
ds-cfg-plugin-type: preOperationModify
ds-cfg-plugin-type: preOperationModifyDN
ds-cfg-unique-attribute-type: uid
dn: cn=Referential Integrity,cn=Plugins,cn=config
objectClass: ds-cfg-plugin
objectClass: ds-cfg-referential-integrity-plugin
cn: Referential Integrity
ds-cfg-plugin-enabled: false
ds-cfg-plugin-type: postOperationDelete
ds-cfg-plugin-type: postOperationModifyDN
ds-cfg-plugin-type: subordinateModifyDN
ds-cfg-referential-integrity-attribute-type: member
ds-cfg-referential-integrity-attribute-type: uniqueMember
dn: cn=Root DNs,cn=config
objectClass: ds-cfg-root-dn-base
ds-cfg-default-root-privilege-name: bypass-acl
ds-cfg-default-root-privilege-name: modify-acl
ds-cfg-default-root-privilege-name: config-read
ds-cfg-default-root-privilege-name: config-write
ds-cfg-default-root-privilege-name: ldif-import
ds-cfg-default-root-privilege-name: ldif-export
ds-cfg-default-root-privilege-name: backend-backup
ds-cfg-default-root-privilege-name: backend-restore
ds-cfg-default-root-privilege-name: server-shutdown
ds-cfg-default-root-privilege-name: server-restart
ds-cfg-default-root-privilege-name: disconnect-client
ds-cfg-default-root-privilege-name: cancel-request
ds-cfg-default-root-privilege-name: password-reset
ds-cfg-default-root-privilege-name: update-schema
ds-cfg-default-root-privilege-name: privilege-change
ds-cfg-default-root-privilege-name: unindexed-search
dn: cn=Directory Manager,cn=Root DNs,cn=config
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: ds-cfg-root-dn
userPassword: {SSHA512}l1t43vVl7Uh03PpQ2vCsT0B7Q0HTi+tKJmH7tZTmSGaKrMHWHO1czfwEsjMgfbeQoiYQDGDuxolipR0H6ajMu1YHlTjPNG9Z
ds-cfg-alternate-bind-dn: cn=Directory Manager
ds-rlim-idle-time-limit: 0
ds-rlim-lookthrough-limit: 0
ds-pwp-password-policy-dn: cn=Root Password Policy,cn=Password Policies,cn=config
dn: cn=Root DSE,cn=config
objectClass: ds-cfg-root-dse
ds-cfg-show-all-attributes: false
dn: cn=SASL Mechanisms,cn=config
objectClass: ds-cfg-branch
dn: cn=ANONYMOUS,cn=SASL Mechanisms,cn=config
objectClass: ds-cfg-sasl-mechanism-handler
objectClass: ds-cfg-anonymous-sasl-mechanism-handler
ds-cfg-sasl-mechanism-handler-enabled: false
dn: cn=CRAM-MD5,cn=SASL Mechanisms,cn=config
objectClass: ds-cfg-sasl-mechanism-handler
objectClass: ds-cfg-cram-md5-sasl-mechanism-handler
ds-cfg-sasl-mechanism-handler-enabled: true
ds-cfg-identity-mapper-dn: cn=Exact Match,cn=Identity Mappers,cn=config
dn: cn=DIGEST-MD5,cn=SASL Mechanisms,cn=config
objectClass: ds-cfg-sasl-mechanism-handler
objectClass: ds-cfg-digest-md5-sasl-mechanism-handler
ds-cfg-sasl-mechanism-handler-enabled: true
ds-cfg-identity-mapper-dn: cn=Exact Match,cn=Identity Mappers,cn=config
dn: cn=EXTERNAL,cn=SASL Mechanisms,cn=config
objectClass: ds-cfg-sasl-mechanism-handler
objectClass: ds-cfg-external-sasl-mechanism-handler
ds-cfg-sasl-mechanism-handler-enabled: true
ds-cfg-client-certificate-validation-policy: ifpresent
ds-cfg-certificate-attribute: userCertificate
ds-cfg-certificate-mapper-dn: cn=Subject Equals DN,cn=Certificate Mappers,cn=config
dn: cn=GSSAPI,cn=SASL Mechanisms,cn=config
objectClass: ds-cfg-sasl-mechanism-handler
objectClass: ds-cfg-gssapi-sasl-mechanism-handler
ds-cfg-sasl-mechanism-handler-enabled: false
ds-cfg-identity-mapper-dn: cn=Regular Expression,cn=Identity Mappers,cn=config
dn: cn=PLAIN,cn=SASL Mechanisms,cn=config
objectClass: ds-cfg-sasl-mechanism-handler
objectClass: ds-cfg-plain-sasl-mechanism-handler
ds-cfg-sasl-mechanism-handler-enabled: true
ds-cfg-identity-mapper-dn: cn=Exact Match,cn=Identity Mappers,cn=config
dn: cn=Synchronization Providers,cn=config
objectClass: ds-cfg-branch
cn: Synchronization Providers
dn: cn=Multimaster Synchronization,cn=Synchronization Providers,cn=config
objectClass: ds-cfg-synchronization-provider
objectClass: ds-cfg-multimaster-synchronization-provider
cn: Multimaster Synchronization
ds-cfg-synchronization-provider-enabled: true
dn: cn=domains,cn=Multimaster Synchronization,cn=Synchronization Providers,cn=config
objectClass: ds-cfg-branch
dn: cn=Syntaxes,cn=config
objectClass: ds-cfg-branch
dn: cn=Absolute Subtree Specification,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Absolute Subtree Specification
ds-cfg-syntax-enabled: true
dn: cn=Sun-defined Access Control Information,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Sun-defined Access Control Information
ds-cfg-syntax-enabled: true
dn: cn=Attribute Type Description,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
objectClass: ds-cfg-attribute-type-description-attribute-syntax
cn: Attribute Type Description
ds-cfg-syntax-enabled: true
ds-cfg-strip-syntax-minimum-upper-bound: false
dn: cn=Authentication Password,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Authentiation Password
ds-cfg-syntax-enabled: true
dn: cn=Binary,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Bit String,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Boolean,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Certificate,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Certificate List,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Certificate Pair,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Country String,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Delivery Method,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Directory String,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
objectClass: ds-cfg-directory-string-attribute-syntax
ds-cfg-syntax-enabled: true
ds-cfg-allow-zero-length-values: false
dn: cn=Distinguished Name,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=DIT Content Rule Description,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: DIT Content Rule Description
ds-cfg-syntax-enabled: true
dn: cn=DIT Structure Rule Description,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: DIT Structure Rule Description
ds-cfg-syntax-enabled: true
dn: cn=Enhanced Guide,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Facsimile Telephone Number,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Facsimile Telephone Number
ds-cfg-syntax-enabled: true
dn: cn=Fax,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Generalized Time,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Guide,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=IA5 String,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Integer,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=JPEG,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=LDAP Syntax Description,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: LDAP Syntax Description
ds-cfg-syntax-enabled: true
dn: cn=Matching Rule Description,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Matching Rule Description
ds-cfg-syntax-enabled: true
dn: cn=Matching Rule Use Description,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Matching Rule Use Description
ds-cfg-syntax-enabled: true
dn: cn=Name and Optional UID,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Name and Optional UID
ds-cfg-syntax-enabled: true
dn: cn=Name Form Description,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Name Form Description
ds-cfg-syntax-enabled: true
dn: cn=Numeric String,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Object Class Description,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Object Class Description
ds-cfg-syntax-enabled: true
dn: cn=Object Identifier,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Octet String,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Other Mailbox,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Postal Address,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Presentation Address,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Printable String,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Protocol Information,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Relative Subtree Specification,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Relative Subtree Specification
ds-cfg-syntax-enabled: true
dn: cn=Substring Assertion,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Subtree Specification,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Subtree Specification
ds-cfg-syntax-enabled: true
dn: cn=Supported Algorithm,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Telephone Number,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
objectClass: ds-cfg-telephone-number-attribute-syntax
ds-cfg-syntax-enabled: true
ds-cfg-strict-telephone-number-format: false
dn: cn=Teletex Terminal Identifier,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
cn: Teletex Terminal Identifier
ds-cfg-syntax-enabled: true
dn: cn=Telex Number,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=UTC Time,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=User Password,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=UUID,cn=Syntaxes,cn=config
objectClass: ds-cfg-attribute-syntax
ds-cfg-syntax-enabled: true
dn: cn=Trust Manager Providers,cn=config
objectClass: ds-cfg-branch
cn: Trust Manager Providers
dn: cn=Blind Trust,cn=Trust Manager Providers,cn=config
objectClass: ds-cfg-trust-manager-provider
ds-cfg-trust-manager-provider-enabled: false
dn: cn=JKS,cn=Trust Manager Providers,cn=config
objectClass: ds-cfg-trust-manager-provider
objectClass: ds-cfg-file-based-trust-manager-provider
ds-cfg-trust-manager-provider-enabled: false
ds-cfg-trust-store-type: JKS
dn: cn=PKCS12,cn=Trust Manager Providers,cn=config
objectClass: ds-cfg-trust-manager-provider
objectClass: ds-cfg-file-based-trust-manager-provider
ds-cfg-trust-manager-provider-enabled: false
ds-cfg-trust-store-type: PKCS12
dn: cn=Virtual Attributes,cn=config
objectClass: ds-cfg-branch
dn: cn=entryDN,cn=Virtual Attributes,cn=config
objectClass: ds-cfg-virtual-attribute
objectClass: ds-cfg-entrydn-virtual-attribute
ds-cfg-virtual-attribute-enabled: true
ds-cfg-virtual-attribute-type: entryDN
ds-cfg-virtual-attribute-conflict-behavior: virtual-overrides-real
dn: cn=entryUUID,cn=Virtual Attributes,cn=config
objectClass: ds-cfg-virtual-attribute
objectClass: ds-cfg-entryuuid-virtual-attribute
ds-cfg-virtual-attribute-enabled: true
ds-cfg-virtual-attribute-type: entryUUID
ds-cfg-virtual-attribute-conflict-behavior: real-overrides-virtual
dn: cn=hasSubordinates,cn=Virtual Attributes,cn=config
objectClass: ds-cfg-virtual-attribute
objectClass: ds-cfg-hassubordinates-virtual-attribute
ds-cfg-virtual-attribute-enabled: true
ds-cfg-virtual-attribute-type: hasSubordinates
ds-cfg-virtual-attribute-conflict-behavior: virtual-overrides-real
dn: cn=isMemberOf,cn=Virtual Attributes,cn=config
objectClass: ds-cfg-virtual-attribute
objectClass: ds-cfg-ismemberof-virtual-attribute
ds-cfg-virtual-attribute-enabled: true
ds-cfg-virtual-attribute-type: isMemberOf
ds-cfg-virtual-attribute-filter: (objectClass=person)
ds-cfg-virtual-attribute-conflict-behavior: virtual-overrides-real
dn: cn=numSubordinates,cn=Virtual Attributes,cn=config
objectClass: ds-cfg-virtual-attribute
objectClass: ds-cfg-numsubordinates-virtual-attribute
ds-cfg-virtual-attribute-enabled: true
ds-cfg-virtual-attribute-type: numSubordinates
ds-cfg-virtual-attribute-conflict-behavior: virtual-overrides-real
dn: cn=subschemaSubentry,cn=Virtual Attributes,cn=config
objectClass: ds-cfg-virtual-attribute
objectClass: ds-cfg-subschemasubentry-virtual-attribute
ds-cfg-virtual-attribute-enabled: true
ds-cfg-virtual-attribute-type: subschemaSubentry
ds-cfg-virtual-attribute-conflict-behavior: virtual-overrides-real
dn: cn=Virtual Static member,cn=Virtual Attributes,cn=config
objectClass: ds-cfg-virtual-attribute
objectClass: ds-cfg-member-virtual-attribute
cn: Virtual Static member
ds-cfg-virtual-attribute-enabled: true
ds-cfg-virtual-attribute-type: member
ds-cfg-virtual-attribute-conflict-behavior: virtual-overrides-real
ds-cfg-virtual-attribute-filter: (&(objectClass=groupOfNames)(objectClass=ds-virtual-static-group))
ds-cfg-allow-retrieving-membership: false
dn: cn=Virtual Static uniqueMember,cn=Virtual Attributes,cn=config
objectClass: ds-cfg-virtual-attribute
objectClass: ds-cfg-member-virtual-attribute
cn: Virtual Static uniqueMember
ds-cfg-virtual-attribute-enabled: true
ds-cfg-virtual-attribute-type: uniqueMember
ds-cfg-virtual-attribute-conflict-behavior: virtual-overrides-real
ds-cfg-virtual-attribute-filter: (&(objectClass=groupOfUniqueNames)(objectClass=ds-virtual-static-group))
ds-cfg-allow-retrieving-membership: false
dn: cn=Work Queue,cn=config
objectClass: ds-cfg-work-queue
objectClass: ds-cfg-traditional-work-queue
ds-cfg-num-worker-threads: 24
ds-cfg-max-work-queue-capacity: 0