OpenLDAP global configuration

<Basic> <Concurrency> <Connections> <Security> <Indexing>
Basic options
Server-ID for multi-master replication (olcServerID): %(olcServerID)s
Set of features to allow (default none) (olcAllows): %(olcAllows)s
File holding the slapd server's command line (olcArgsFile): %(olcArgsFile)s
Directory holding the server configuration (olcConfigDir): %(olcConfigDir)s
File holding the server configuration (olcConfigFile): %(olcConfigFile)s
SIGHUP will cause a 'gentle' shutdown-attempt (olcGentleHUP): %(olcGentleHUP)s
Logging level (olcLogLevel): %(olcLogLevel)s
File containing PID of slapd process (olcPidFile): %(olcPidFile)s
Database in read-only mode (olcReadOnly): %(olcReadOnly)s
Tagging attribute options or option tag/range prefixes (olcAttributeOptions): %(olcAttributeOptions)s
Concurrency/threads
Desired level of concurrency (olcConcurrency): %(olcConcurrency)s
Maximum size of primary thread pool (olcThreads): %(olcThreads)s
Number of threads for connection manager (olcListenerThreads): %(olcListenerThreads)s
Maximum number of threads for tool mode (olcToolThreads): %(olcToolThreads)s
Connection and timeout options
Enable client name reverse lookup (olcReverseLookup): %(olcReverseLookup)s
Max. pending requests for anonymous sessions (olcConnMaxPending): %(olcConnMaxPending)s
Max. pending requests for authenticated sessions (olcConnMaxPendingAuth): %(olcConnMaxPendingAuth)s
Time to wait before forcibly closing idle client connections (olcIdleTimeout): %(olcIdleTimeout)s seconds
Time to wait before forcibly closing connections with outstanding write ops (olcWriteTimeout): %(olcWriteTimeout)s seconds
Maximum incoming LDAP PDU size for anonymous sessions (olcSockbufMaxIncoming): %(olcSockbufMaxIncoming)s bytes
Maximum incoming LDAP PDU size for authenticated sessions (olcSockbufMaxIncomingAuth): %(olcSockbufMaxIncomingAuth)s bytes
Size of read/write TCP buffers (olcTCPBuffer): %(olcTCPBuffer)s bytes
Security options
Security strength factors (separated by white space) (olcSecurity): %(olcSecurity)s
Security Strength Factor (SSF) for local LDAP sessions (olcLocalSSF): %(olcLocalSSF)s
Authz options
Rules to use for Proxy Authorization (olcAuthzPolicy): %(olcAuthzPolicy)s
Authz-mapping regexp (olcAuthzRegexp): %(olcAuthzRegexp)s
Password options
Hash scheme to be used with Password Modify ext.op. (olcPasswordHash): %(olcPasswordHash)s
Salt format for {CRYPT} hashing scheme (olcPasswordCryptSaltFormat): %(olcPasswordCryptSaltFormat)s
SASL options
SASL hostname (olcSaslHost): %(olcSaslHost)s
SASL Realm (olcSaslRealm): %(olcSaslRealm)s
Cyrus SASL auxprop plugins used for authentication lookups (olcSaslAuxprops): %(olcSaslAuxprops)s
Cyrus SASL security properties (olcSaslSecProps): %(olcSaslSecProps)s
SSL/TLS options
(olcTLSCACertificateFile): %(olcTLSCACertificateFile)s
(olcTLSCACertificatePath): %(olcTLSCACertificatePath)s
Server certificate file (olcTLSCertificateFile): %(olcTLSCertificateFile)s
Server private key file (olcTLSCertificateKeyFile): %(olcTLSCertificateKeyFile)s
CRL checking for client certs (olcTLSCRLCheck): %(olcTLSCRLCheck)s
CRL file (olcTLSCRLFile): %(olcTLSCRLFile)s
(olcTLSDHParamFile): %(olcTLSDHParamFile)s
(olcTLSCipherSuite): %(olcTLSCipherSuite)s
(olcTLSRandFile): %(olcTLSRandFile)s
(olcTLSProtocolMin): %(olcTLSProtocolMin)s
(olcTLSVerifyClient): %(olcTLSVerifyClient)s
Indexing options
Key length for ordered integer indices (olcIndexIntLen): %(olcIndexIntLen)s
Length used for subany indices (olcIndexSubstrAnyLen): %(olcIndexSubstrAnyLen)s
Steps used in subany index lookups (olcIndexSubstrAnyStep): %(olcIndexSubstrAnyStep)s
Maximum length for subinitial and subfinal indices (olcIndexSubstrIfMaxLen): %(olcIndexSubstrIfMaxLen)s
Minimum length for subinitial and subfinal indices (olcIndexSubstrIfMinLen): %(olcIndexSubstrIfMinLen)s