<h1>OpenLDAP global configuration</h1>

<p>
  <a class="CL" title="Basic options" href="#basic">Basic</a> //
  <a class="CL" title="Concurrency/threads options" href="#concurrency">Concurrency</a> //
  <a class="CL" title="Connection and timeout options" href="#conn">Connections</a> //
  <a class="CL" title="Security options" href="#security">Security</a> //
  <a class="CL" title="Authz options" href="#indexing">Indexing</a> //
  <a title="Read the man page" href="https://www.openldap.org/software/man.cgi?query=slapd-config">slapd-config(5)</a>
</p>

<fieldset id="basic">
  <legend>Basic options</legend>
  <table>
    <tr>
      <td>Server-ID for multi-provider replication (<var>olcServerID</var>):</td>
      <td>%(olcServerID)s</td>
    </tr>
    <tr>
      <td>Set of features to allow (default none) (<var>olcAllows</var>):</td>
      <td>%(olcAllows)s</td>
    </tr>
    <tr>
      <td>File holding the slapd server's command line (<var>olcArgsFile</var>):</td>
      <td>%(olcArgsFile)s</td>
    </tr>
    <tr>
      <td>Directory holding the server configuration (<var>olcConfigDir</var>):</td>
      <td>%(olcConfigDir)s</td>
    </tr>
    <tr>
      <td>File holding the server configuration (<var>olcConfigFile</var>):</td>
      <td>%(olcConfigFile)s</td>
    </tr>
    <tr>
      <td>SIGHUP will cause a 'gentle' shutdown-attempt (<var>olcGentleHUP</var>):</td>
      <td>%(olcGentleHUP)s</td>
    </tr>
    <tr>
      <td>Logging level (<var>olcLogLevel</var>):</td>
      <td>%(olcLogLevel)s</td>
    </tr>
    <tr>
      <td>File containing PID of slapd process (<var>olcPidFile</var>):</td>
      <td>%(olcPidFile)s</td>
    </tr>
    <tr>
      <td>Database  in read-only mode (<var>olcReadOnly</var>):</td>
      <td>%(olcReadOnly)s</td>
    </tr>
    <tr>
      <td>Tagging attribute options or option tag/range prefixes (<var>olcAttributeOptions</var>):</td>
      <td>%(olcAttributeOptions)s</td>
    </tr>
  </table>
</fieldset>

<fieldset>
  <legend id="concurrency">Concurrency/threads</legend>
  <table>
    <tr>
      <td>Desired level of concurrency (<var>olcConcurrency</var>):</td>
      <td>%(olcConcurrency)s</td>
    </tr>
    <tr>
      <td>Maximum size of primary thread pool (<var>olcThreads</var>):</td>
      <td>%(olcThreads)s</td>
    </tr>
    <tr>
      <td>Number of threads for connection manager (<var>olcListenerThreads</var>):</td>
      <td>%(olcListenerThreads)s</td>
    </tr>
    <tr>
      <td>Maximum number of threads for tool mode (<var>olcToolThreads</var>):</td>
      <td>%(olcToolThreads)s</td>
    </tr>
  </table>
</fieldset>

<fieldset id="conn">
  <legend>Connection and timeout options</legend>
  <table>
    <tr>
      <td>Enable client name reverse lookup (<var>olcReverseLookup</var>):</td>
      <td>%(olcReverseLookup)s</td>
    </tr>
    <tr>
      <td>Max. pending requests for anonymous sessions (<var>olcConnMaxPending</var>):</td>
      <td>%(olcConnMaxPending)s</td>
    </tr>
    <tr>
      <td>Max. pending requests for authenticated sessions  (<var>olcConnMaxPendingAuth</var>):</td>
      <td>%(olcConnMaxPendingAuth)s</td>
    </tr>
    <tr>
      <td>Time to wait before forcibly closing idle client connections (<var>olcIdleTimeout</var>):</td>
      <td>%(olcIdleTimeout)s seconds</td>
    </tr>
    <tr>
      <td>Time to wait before forcibly closing connections with outstanding write ops (<var>olcWriteTimeout</var>):</td>
      <td>%(olcWriteTimeout)s seconds</td>
    </tr>
    <tr>
      <td>Maximum incoming LDAP PDU size for anonymous sessions (<var>olcSockbufMaxIncoming</var>):</td>
      <td>%(olcSockbufMaxIncoming)s bytes</td>
    </tr>
    <tr>
      <td>Maximum incoming LDAP PDU size for authenticated sessions (<var>olcSockbufMaxIncomingAuth</var>):</td>
      <td>%(olcSockbufMaxIncomingAuth)s bytes</td>
    </tr>
    <tr>
      <td>Size of read/write TCP buffers (<var>olcTCPBuffer</var>):</td>
      <td>%(olcTCPBuffer)s bytes</td>
    </tr>
  </table>
</fieldset>

<fieldset id="security">
  <legend>Security options</legend>
  <table>
    <tr>
      <td>Security strength factors (separated by white space) (<var>olcSecurity</var>):</td>
      <td>%(olcSecurity)s</td>
    </tr>
    <tr>
      <td>Security Strength Factor (SSF) for local LDAP sessions (<var>olcLocalSSF</var>):</td>
      <td>%(olcLocalSSF)s</td>
    </tr>
  </table>

<fieldset>
  <legend>Authz options</legend>
  <table>
    <tr>
      <td>Rules to use for Proxy Authorization (<var>olcAuthzPolicy</var>):</td>
      <td>%(olcAuthzPolicy)s</td>
    </tr>
    <tr>
      <td>Authz-mapping regexp (<var>olcAuthzRegexp</var>):</td>
      <td>%(olcAuthzRegexp)s</td>
    </tr>
  </table>
</fieldset>

<fieldset>
  <legend>Password options</legend>
  <table>
    <tr>
      <td>Hash scheme to be used with Password Modify ext.op. (<var>olcPasswordHash</var>):</td>
      <td>%(olcPasswordHash)s</td>
    </tr>
    <tr>
      <td>Salt format for <em>{CRYPT}</em> hashing scheme (<var>olcPasswordCryptSaltFormat</var>):</td>
      <td>%(olcPasswordCryptSaltFormat)s</td>
    </tr>
  </table>
</fieldset>

<fieldset>
  <legend>SASL options</legend>
  <table>
    <tr>
      <td>SASL hostname (<var>olcSaslHost</var>):</td>
      <td>%(olcSaslHost)s</td>
    </tr>
    <tr>
      <td>SASL Realm (<var>olcSaslRealm</var>):</td>
      <td>%(olcSaslRealm)s</td>
    </tr>
    <tr>
      <td>Cyrus SASL auxprop plugins used for authentication lookups (<var>olcSaslAuxprops</var>):</td>
      <td>%(olcSaslAuxprops)s</td>
    </tr>
    <tr>
      <td>Cyrus SASL security properties (<var>olcSaslSecProps</var>):</td>
      <td>%(olcSaslSecProps)s</td>
    </tr>
  </table>
</fieldset>

<fieldset>
  <legend>SSL/TLS options</legend>
  <table>
    <tr>
      <td>CA certificate bundle file (<var>olcTLSCACertificateFile</var>):</td>
      <td>%(olcTLSCACertificateFile)s</td>
    </tr>
    <tr>
      <td>CA certificate(s) directory (<var>olcTLSCACertificatePath</var>):</td>
      <td>%(olcTLSCACertificatePath)s</td>
    </tr>
    <tr>
      <td>Server certificate file (<var>olcTLSCertificateFile</var>):</td>
      <td>%(olcTLSCertificateFile)s</td>
    </tr>
    <tr>
      <td>Server private key file (<var>olcTLSCertificateKeyFile</var>):</td>
      <td>%(olcTLSCertificateKeyFile)s</td>
    </tr>
    <tr>
      <td>CRL checking for client certs (<var>olcTLSCRLCheck</var>):</td>
      <td>%(olcTLSCRLCheck)s</td>
    </tr>
    <tr>
      <td>CRL file (<var>olcTLSCRLFile</var>):</td>
      <td>%(olcTLSCRLFile)s</td>
    </tr>
    <tr>
      <td>DH parameter file (<var>olcTLSDHParamFile</var>):</td>
      <td>%(olcTLSDHParamFile)s</td>
    </tr>
    <tr>
      <td>Accepted TLS cipher suites (<var>olcTLSCipherSuite</var>):</td>
      <td>%(olcTLSCipherSuite)s</td>
    </tr>
    <tr>
      <td>Elliptic curves for DHE key exchange (<var>olcTLSECName</var>):</td>
      <td>%(olcTLSECName)s</td>
    </tr>
    <tr>
      <td> (<var>olcTLSRandFile</var>):</td>
      <td>%(olcTLSRandFile)s</td>
    </tr>
    <tr>
      <td>Minimum TLS protocol version (<var>olcTLSProtocolMin</var>):</td>
      <td>%(olcTLSProtocolMin)s</td>
    </tr>
    <tr>
      <td>Client certificates check (<var>olcTLSVerifyClient</var>):</td>
      <td>%(olcTLSVerifyClient)s</td>
    </tr>
  </table>
</fieldset>

</fieldset>

<fieldset id="indexing">
  <legend>Indexing options</legend>
  <table>
    <tr>
      <td>Key length for ordered integer indices (<var>olcIndexIntLen</var>):</td>
      <td>%(olcIndexIntLen)s</td>
    </tr>
    <tr>
      <td>Length used for subany indices (<var>olcIndexSubstrAnyLen</var>):</td>
      <td>%(olcIndexSubstrAnyLen)s</td>
    </tr>
    <tr>
      <td>Steps used in subany index lookups (<var>olcIndexSubstrAnyStep</var>):</td>
      <td>%(olcIndexSubstrAnyStep)s</td>
    </tr>
    <tr>
      <td>Maximum length for subinitial and subfinal indices (<var>olcIndexSubstrIfMaxLen</var>):</td>
      <td>%(olcIndexSubstrIfMaxLen)s</td>
    </tr>
    <tr>
      <td>Minimum length for subinitial and subfinal indices (<var>olcIndexSubstrIfMinLen</var>):</td>
      <td>%(olcIndexSubstrIfMinLen)s</td>
    </tr>
  </table>
</fieldset>
