source: trunk/server/fedora/config/etc/sysconfig/dirsrv @ 2005

Last change on this file since 2005 was 1716, checked in by geofft, 12 years ago
Have slapd use a file ccache instead of a memory one I suspect this will work around some bugs in the GSSAPI- / Kerberos-handling code. If KRB5CCNAME is set and valid, slapd will use that instead of making its own ccache.
File size: 2.2 KB
1# This file is sourced by dirsrv upon startup to set
2# the default environment for all directory server instances.
3# To set instance specific defaults, use the file in the same
4# directory called dirsrv-instance where "instance"
5# is the name of your directory server instance e.g.
6# dirsrv-localhost for the slapd-localhost instance.
8# In order to make more file descriptors available
9# to the directory server, first make sure the system
10# hard limits are raised, then use ulimit - uncomment
11# out the following line and change the value to the
12# desired value
13# ulimit -n 8192
15# A per instance keytab does not make much sense for servers.
16# Kerberos clients use the machine FQDN to obtain a ticket like ldap/FQDN, there
17# is nothing that can make a client understand how to get a per-instance ticket.
18# Therefore by default a keytab should be considered a per server option.
20# Also this file is sourced for all instances, so again all
21# instances would ultimately get the same keytab.
23# Finally a keytab is normally named either krb5.keytab or <service>.keytab
25# In order to use SASL/GSSAPI (Kerberos) the directory
26# server needs to know where to find its keytab
27# file - uncomment the following line and set
28# the path and filename appropriately
29KRB5_KTNAME=/etc/dirsrv/keytab ; export KRB5_KTNAME
31# Use a disk ccache instead of a memory one (this is renewed by the
32# slapdagent cronjob) -- geofft 30 October 2010
33KRB5CCNAME=/var/run/dirsrv/krb5cc; export KRB5CCNAME
34/usr/kerberos/bin/kinit -k -t "$KRB5_KTNAME" ldap/"$(hostname)"
35chown --reference="$KRB5_KTNAME" "$KRB5CCNAME"
37# other environment settings can be added here too
38OS=`uname -s`
39# use the new mt slab memory allocator on Solaris
40# this requires Solaris 9 update 3 or later
41if [ "$OS" = "SunOS" -a -f /usr/lib/ ] ; then
42    LD_PRELOAD=/usr/lib/
43    export LD_PRELOAD
45if [ "$OS" = "SunOS" -a -f /usr/lib/64/ ] ; then
46    LD_PRELOAD_64=/usr/lib/64/
47    export LD_PRELOAD_64
50# how many seconds to wait for the startpid file to show
51# up before we assume there is a problem and fail to start
53# how many seconds to wait for the pid file to show
54# up before we assume there is a problem and fail to start
55#PID_TIME=600 ; export PID_TIME
Note: See TracBrowser for help on using the repository browser.