HP-UX Directory Server Administrator Guide HP-UX Directory Server Version 8.1 (5900-3098, May 2013)

7.3 Setting Resource Limits Based on the bind DN
Server limits for search operations are controlled using special operational attribute values on the
client application binding to the directory. You can set the following search operation limits:
• Look through limit
Specifies how many entries can be examined for a search operation.
• Size limit
Specifies the maximum number of entries the server returns to a client application in response
to a search operation.
• Time limit
Specifies the maximum time the server spends processing a search operation.
• Idle timeout
Specifies the time a connection to the server can be idle before the connection is dropped.
The resource limits set for the client application take precedence over the default resource limits
set for in the global server configuration.
NOTE:
The Directory Manager receives unlimited resources by default.
• “Setting resource limits using the console” (page 303)
• “Setting resource limits using the command line” (page 303)
7.3.1 Setting resource limits using the console
The following procedure describes setting resource limits for a user or a role using the Directory
Server Console:
1. Select the Directory tab.
2. Browse the navigation tree in the left navigation pane, and double-click the user or role for
which to set resource limits.
The Edit Entry dialog box appears.
3. Click Account in the left pane. The right pane contains the four limits that can be set in the
Resource Limits section.
Entering a value of -1 indicates no limit.
4. Click OK.
7.3.2 Setting resource limits using the command line
The following operational attributes can be set for each entry using the command line. Use
ldapmodify to add the following attributes to the entry:
DescriptionAttribute
Specifies how many entries are examined for a search operation. Giving this attribute
a value of -1 indicates that there is no limit.
nsLookThroughLimit
Specifies the maximum number of entries the server returns to a client application in
response to a search operation. Giving this attribute a value of -1 indicates that there
is no limit.
nsSizeLimit
7.3 Setting Resource Limits Based on the bind DN 303