Attributes in the root DSE
You can go through the provided list of attributes in the root DSE.
- namingcontexts
- The naming contexts held in the server.
The values of this attribute correspond to the naming contexts that this server masters or shadows. If the server does not master or shadow any information (for example, it is an LDAP gateway to a public X.500 directory), this attribute is absent.If the server believes it contains the entire directory, the attribute has a single value, and that value is an empty string (indicating the null DN of the root). This allows a client to choose suitable base objects for searching when it has contacted a server (the list of highest level suffixes the user defines in the configuration).
- ibm-configurationnamingcontext
- The suffix where the server's configuration entries are stored. For versions 6.0 and above this is cn=configuration.
- subschemasubentry
-
The value of this attribute is the name of a subschema entry in which the server makes available attributes specifying the schema. It is set to
cn=schema. - security
- The secure SSL port the server is listening on. For example 636.
- port
- The nonsecure port the server is listening on. For example 389. This is only present only if the server does not have a secure port enabled.
- supportedsaslmechanisms
- A list of supported SASL security features.
The values of this attribute are the names of supported SASL mechanisms that the server supports.If the server does not support any mechanisms then this attribute is absent. This attribute contains any SASL mechanism that is registered to the server.
- supportedldapversion
- LDAP versions implemented by the current server.
The values of this attribute are the versions of the LDAP protocol that the server implements. The values are
2and3. - ibmdirectoryversion
- The version of IBM® Verify Directory installed on this server. The current version is 11.0.1.
- ibm-enabledcapabilities
- Lists the server capabilities currenty enabled on the server. See OIDs for supported and enabled capabilities for the values.
- ibm-ldapservicename
- Specifies the host name of the server. If a Kerberos realm is defined, the form is hostname@realmname.
- ibm-serverId
- The unique ID assigned to the server at the initial startup of the server. This ID is used in replication topology to determine a server's role.
- vendorname
- The supplier of this version of LDAP. For IBM Verify Directory, this is set to
International Business Machines (IBM). - vendorversion
- For IBM Verify Directory 11.0.1, the vendor version is set to 11.0.1.
- ibm-slapdSecurityProtocol
- Specifies the secure communication protocols that are configured on the server.
- ibm-tlsciphers
- Specifies the supported TLS 1.2 ciphers that are configured on the server.
- ibm-slapdServerBackend
- Specifies whether the server loads a database or proxy backend.
- ibm-slapdSizeLimit
- Limits the number of entries returned by a search initiated by nonadministrative users.
- ibm-slapdTimeLimit
- Specifies in seconds the maximum amount of time the server spends processing a search request initiated by nonadministrative users.
- ibm-slapdSSLExtSigalg
- Specifies the TLS 1.2 signature and hash algorithms that are configured on a server.
- ibm-slapdSuiteBMode
- Specifies the Suite B cryptographic security level that is configured on a server.
- ibm-slapdDerefAliases
- Describes how the server is configured to handle dereferrencing.
- ibm-supportedAuditVersion
- The supported version of auditing. For example, in version 6.0 and above the server supports auditing version 3 that enables auditing of extended operations.
- ibm-supportedACIMechanisms
- Lists the ACL models the server supports. See OIDs for ACI mechanisms for the values.
- ibm-supportedcapabilities
- Lists the server capabilities currently supported by the server. See OIDs for supported and enabled capabilities for the values.
- ibm-sasldigestrealmname
- Displays the SASL digest realm name associated with the server.
- ibm-slapdServerInstanceName
- Name of the directory server instance running on the server.
- ibm-slapdisconfigurationmode
- Identifies whether the server is running in configuration mode. If TRUE, the server is in configuration mode. If FALSE, the server is not in configuration mode.
- ibm-slapdTlsExtSigScheme
- The TLS signature schemes which are being used by the server.
- ibm-slapdTlsExtSigSchemeCert
- The TLS signature schemes which are being used by the server for certificate authentication.
- ibm-slapdTlsExtSupportedGroups
- The names of the elliptic curve groups which can be used in a TLS 1.3 key exchange by the server.