The hostname or IP address of the OpenDJ server; e.g., localhost ldap.host localhost The port number of the OpenDJ server; e.g., 389 ldap.port 389 A flag to specify if the HTTP Authorization header field's Basic credentials is built with a plain ID (if false, it's a DN) ldap.authzidtypeisid false A flag to specify if the ldap.port is the SSL secured port ldap.usessl false A flag to specify if StartTLS should be use to secure connections to the ldap.port ldap.usestarttls false A flag to specify if all certificates should be blindly trusted ldap.trustall false Maximum number of batchRequest elements accepted per SOAP body. Every batchRequest element is executed over its own LDAP connection and bind, and password verification is deliberately expensive, so a single small POST holding many batchRequest elements would amplify into many binds. DSMLv2 describes a single batchRequest per SOAP body; raise this cap only if your clients really send more. Excess elements are rejected with a notAttempted errorResponse. ldap.dsml.batchrequests.max 1 Maximum size in bytes of an accepted request body. The SOAP message is parsed into memory, so an unbounded body is an unbounded allocation. Oversized requests are rejected with a notAttempted errorResponse. ldap.dsml.request.maxsize 10485760 Maximum number of operations accepted in one batchRequest. A compare on an attribute stored under a salted password scheme (PBKDF2, bcrypt, ...) costs a full password verification, so an unbounded batch lets a single POST buy an unbounded amount of CPU. Large batches are a designed use of DSMLv2 (bulk provisioning), so the default is generous; raise it if your clients really send more. A batchRequest holding more operations is rejected as a whole with a notAttempted errorResponse, before anything is executed. Note that a single POST may hold up to ldap.dsml.batchrequests.max batchRequest elements, each allowed this many operations. ldap.dsml.batchrequest.operations.max 10000 The Who Am I? [RFC 4532] extended operation returns a string. ldap.exop.string.1.3.6.1.4.1.4203.1.11.3 true DSMLServlet org.opends.dsml.protocol.DSMLServlet DSMLServlet /DSMLServlet DSML Gateway /DSMLServlet dsml-user BASIC OpenDJ DSML Gateway dsml-user