HP-UX Directory Server Administrator Guide HP-UX Directory Server Version 8.1 (5900-3098, May 2013)

• “Searching and modifying the Retro changelog” (page 382)
• “Retro changelog and the access control policy” (page 383)
8.16.1 Enabling the Retro changelog plug-in
The retro changelog plug-in configuration information is stored in the cn=Retro Changelog
Plugin,cn=plugins,cn=config entry in dse.ldif. To enable the retro changelog plug-in
from the command line:
1. Create an LDIF file that contains the following LDIF update statements:
dn: cn=Retro Changelog Plugin,cn=plugins,cn=config
cn: Retro Changelog Plugin
changetype: modify
replace: nsslapd-pluginenabled
nsslapd-pluginenabled: on
2. Use the ldapmodify command to import the LDIF file into the directory.
For more information on the ldapmodify command, see “Managing Entries from the
Command line” (page 111) and the HP-UX Directory Server configuration, command, and file
reference.
3. Restart the server.
For information on restarting the server, see “Starting and Stopping Servers” (page 19).
The retro changelog is created in the directory tree under a special suffix, cn=changelog.
The procedure for enabling the retro changelog plug-in from Directory Server Console is the same
as for all Directory Server plug-ins. For information, see “Enabling plug-ins” (page 28).
8.16.2 Trimming the Retro changelog
The entries in the changelog can be automatically removed after a specified period of time. To
configure the period of time after which entries are automatically deleted from the changelog, set
the nsslapd-changelogmaxage configuration attribute in the cn=Retro Changelog
Plugin,cn=plugins,cn=config entry.
The nsslapd-changelogmaxage attribute is a single-valued attribute. Its syntax is as follows:
nsslapd-changelogmaxage: Integer timeUnit
Integer is a number, and timeUnit can be s for seconds, m for minutes, h for hours, d for
days, or w for weeks.
NOTE:
There should not be a space between the Integer and timeUnit variables. The space in the
syntax above is intended to show that the attribute value is composed of two variable parts, not
just one. For example:
nsslapd-changelogmaxage: 2d
8.16.3 Searching and modifying the Retro changelog
The changelog supports search operations and is optimized for searches that include filters of the
form (&(changeNumber>=X)(changeNumber<=Y)).
As a general rule, do not perform add or modify operations on the retro changelog entries, although
entries can be deleted to trim the size of the changelog. Only modify the retro changelog entry to
modify the default access control policy.
382 Managing Replication