| [1715] | 1 | # This file is sourced by dirsrv upon startup to set |
|---|
| 2 | # the default environment for all directory server instances. |
|---|
| 3 | # To set instance specific defaults, use the file in the same |
|---|
| 4 | # directory called dirsrv-instance where "instance" |
|---|
| 5 | # is the name of your directory server instance e.g. |
|---|
| 6 | # dirsrv-localhost for the slapd-localhost instance. |
|---|
| 7 | |
|---|
| 8 | # In order to make more file descriptors available |
|---|
| 9 | # to the directory server, first make sure the system |
|---|
| 10 | # hard limits are raised, then use ulimit - uncomment |
|---|
| 11 | # out the following line and change the value to the |
|---|
| 12 | # desired value |
|---|
| 13 | # ulimit -n 8192 |
|---|
| 14 | |
|---|
| 15 | # A per instance keytab does not make much sense for servers. |
|---|
| 16 | # Kerberos clients use the machine FQDN to obtain a ticket like ldap/FQDN, there |
|---|
| 17 | # is nothing that can make a client understand how to get a per-instance ticket. |
|---|
| 18 | # Therefore by default a keytab should be considered a per server option. |
|---|
| 19 | |
|---|
| 20 | # Also this file is sourced for all instances, so again all |
|---|
| 21 | # instances would ultimately get the same keytab. |
|---|
| 22 | |
|---|
| 23 | # Finally a keytab is normally named either krb5.keytab or <service>.keytab |
|---|
| 24 | |
|---|
| 25 | # In order to use SASL/GSSAPI (Kerberos) the directory |
|---|
| 26 | # server needs to know where to find its keytab |
|---|
| 27 | # file - uncomment the following line and set |
|---|
| 28 | # the path and filename appropriately |
|---|
| 29 | KRB5_KTNAME=/etc/dirsrv/keytab ; export KRB5_KTNAME |
|---|
| 30 | |
|---|
| [1716] | 31 | # Use a disk ccache instead of a memory one (this is renewed by the |
|---|
| 32 | # slapdagent cronjob) -- geofft 30 October 2010 |
|---|
| 33 | KRB5CCNAME=/var/run/dirsrv/krb5cc; export KRB5CCNAME |
|---|
| 34 | /usr/kerberos/bin/kinit -k -t "$KRB5_KTNAME" ldap/"$(hostname)" |
|---|
| 35 | chown --reference="$KRB5_KTNAME" "$KRB5CCNAME" |
|---|
| 36 | |
|---|
| [1715] | 37 | # other environment settings can be added here too |
|---|
| 38 | OS=`uname -s` |
|---|
| 39 | # use the new mt slab memory allocator on Solaris |
|---|
| 40 | # this requires Solaris 9 update 3 or later |
|---|
| 41 | if [ "$OS" = "SunOS" -a -f /usr/lib/libumem.so ] ; then |
|---|
| 42 | LD_PRELOAD=/usr/lib/libumem.so |
|---|
| 43 | export LD_PRELOAD |
|---|
| 44 | fi |
|---|
| 45 | if [ "$OS" = "SunOS" -a -f /usr/lib/64/libumem.so ] ; then |
|---|
| 46 | LD_PRELOAD_64=/usr/lib/64/libumem.so |
|---|
| 47 | export LD_PRELOAD_64 |
|---|
| 48 | fi |
|---|
| 49 | |
|---|
| 50 | # how many seconds to wait for the startpid file to show |
|---|
| 51 | # up before we assume there is a problem and fail to start |
|---|
| 52 | #STARTPID_TIME=10 ; export STARTPID_TIME |
|---|
| 53 | # how many seconds to wait for the pid file to show |
|---|
| 54 | # up before we assume there is a problem and fail to start |
|---|
| 55 | #PID_TIME=600 ; export PID_TIME |
|---|
