JE Backend
A JE Backend stores application data in a Berkeley DB Java Edition database.
It is the traditional "directory server" backend and is similar to the backends provided by the Sun Java System Directory Server. The JE Backend stores the entries in an encoded form and also provides indexes that can be used to quickly locate target entries based on different kinds of criteria.
Parent
The JE Backend object inherits from Pluggable Backend.
JE Backend properties
You can use configuration expressions to set property values at startup time. For details, see Property value substitution.
backend-id
Synopsis |
Specifies a name to identify the associated backend. |
Description |
The name must be unique among all backends in the server. The backend ID may not be altered after the backend is created in the server. |
Default value |
None |
Allowed values |
A string. |
Multi-valued |
No |
Required |
Yes |
Admin action required |
None |
Advanced |
No |
Read-only |
Yes |
base-dn
Synopsis |
Specifies the base DN(s) for the data that the backend handles. |
Description |
A single backend may be responsible for one or more base DNs. Note that no two backends may have the same base DN although one backend may have a base DN that is below a base DN provided by another backend (similar to the use of sub-suffixes in the Sun Java System Directory Server). If any of the base DNs is subordinate to a base DN for another backend, then all base DNs for that backend must be subordinate to that same base DN. |
Default value |
None |
Allowed values |
A valid DN. |
Multi-valued |
Yes |
Required |
Yes |
Admin action required |
None No administrative action is required by default although some action may be required on a per-backend basis before the new base DN may be used. |
Advanced |
No |
Read-only |
No |
compact-encoding
Synopsis |
Indicates whether the backend should use a compact form when encoding entries by compressing the attribute descriptions and object class sets. |
Description |
Note that this property applies only to the entries themselves and does not impact the index data. It will also replace the attribute descriptions used in add and modify operations with normalized ones from the schema. |
Default value |
true |
Allowed values |
true false |
Multi-valued |
No |
Required |
No |
Admin action required |
None Changes to this setting take effect only for writes that occur after the change is made. It is not retroactively applied to existing data. |
Advanced |
No |
Read-only |
No |
confidentiality-enabled
Synopsis |
Indicates whether the backend should make entries in database files readable only by Directory Server. |
Description |
Confidentiality is achieved by encrypting entries before writing them to the underlying storage. Entry encryption will protect data on disk from unauthorised parties reading the files; for complete protection, also set confidentiality for sensitive attributes indexes. The property cannot be set to false if some of the indexes have confidentiality set to true. |
Default value |
false |
Allowed values |
true false |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
No |
Read-only |
No |
db-cache-percent
Synopsis |
Specifies the percentage of JVM memory to allocate to the database cache. |
Description |
Specifies the percentage of memory available to the JVM that should be used for caching database contents. Note that this is only used if the value of the db-cache-size property is set to "0 MB". Otherwise, the value of that property is used instead to control the cache size configuration. Note also that this option is ignored if the global option je-backend-shared-cache-enabled is true. |
Default value |
50 |
Allowed values |
An integer. Lower limit: 1. Upper limit: 90. |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
No |
Read-only |
No |
db-cache-size
Synopsis |
The amount of JVM memory to allocate to the database cache. |
Description |
Specifies the amount of memory that should be used for caching database contents. A value of "0 MB" indicates that the db-cache-percent property should be used instead to specify the cache size. Note also that this option is ignored if the global option je-backend-shared-cache-enabled is true. |
Default value |
0 MB |
Allowed values |
Uses size syntax. |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
No |
Read-only |
No |
db-directory
Synopsis |
Specifies the path to the filesystem directory that is used to hold the Berkeley DB Java Edition database files containing the data for this backend. |
Description |
The path may be either an absolute path or a path relative to the directory containing the base of the OpenDJ directory server installation. The path may be any valid directory path in which the server has appropriate permissions to read and write files and has sufficient space to hold the database contents. |
Default value |
db |
Allowed values |
A string. |
Multi-valued |
No |
Required |
Yes |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
No |
Read-only |
No |
enabled
Synopsis |
Indicates whether the backend is enabled in the server. |
Description |
If a backend is not enabled, then its contents are not accessible when processing operations. |
Default value |
None |
Allowed values |
true false |
Multi-valued |
No |
Required |
Yes |
Admin action required |
None |
Advanced |
No |
Read-only |
No |
writability-mode
Synopsis |
Specifies the behavior that the backend should use when processing write operations. |
Default value |
enabled |
Allowed values |
|
Multi-valued |
No |
Required |
Yes |
Admin action required |
None |
Advanced |
No |
Read-only |
No |
Advanced properties
Use the --advanced
option to access advanced properties.
cipher-key-length
Synopsis |
Specifies the key length in bits for the preferred cipher. |
Default value |
128 |
Allowed values |
An integer. Lower limit: 0. |
Multi-valued |
No |
Required |
No |
Admin action required |
None Changes to this property take effect immediately but only affect cryptographic operations performed after the change. |
Advanced |
Yes |
Read-only |
No |
cipher-transformation
Synopsis |
Specifies the cipher for the directory server using the syntax algorithm/mode/padding. |
Description |
The full transformation is required: specifying only an algorithm and allowing the cipher provider to supply the default mode and padding is not supported, because there is no guarantee these default values are the same among different implementations. Some cipher algorithms do not have a mode or padding, hence the fields must be specified using NONE as mode and NoPadding as padding. For example, ChaCha20/NONE/NoPadding. |
Default value |
AES/GCM/NoPadding |
Allowed values |
The cipher transformation. |
Multi-valued |
No |
Required |
No |
Admin action required |
None Changes to this property take effect immediately but only affect cryptographic operations performed after the change. |
Advanced |
Yes |
Read-only |
No |
db-cache-mode
Synopsis |
The strategy that will be used for caching database content in memory. |
Description |
Specifies whether the database heap cache should keep only internal nodes or both internal and leaf nodes. |
Default value |
cache-ln |
Allowed values |
|
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
db-checkpointer-bytes-interval
Synopsis |
Specifies the maximum number of bytes that may be written to the database before it is forced to perform a checkpoint. |
Description |
This can be used to bound the recovery time that may be required if the database environment is opened without having been properly closed. If this property is set to a non-zero value, the checkpointer wakeup interval is not used. To use time-based checkpointing, set this property to zero. |
Default value |
500mb |
Allowed values |
Uses size syntax. Upper limit: 9223372036854775807. |
Multi-valued |
No |
Required |
No |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
Yes |
Read-only |
No |
db-checkpointer-wakeup-interval
Synopsis |
Specifies the maximum length of time that may pass between checkpoints, when there are updates to the database. |
Description |
Note that this is only used if the value of the checkpointer bytes interval is zero. |
Default value |
30s |
Allowed values |
|
Multi-valued |
No |
Required |
No |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
Yes |
Read-only |
No |
db-cleaner-min-utilization
Synopsis |
Specifies the occupancy percentage for "live" data in this backend’s database. |
Description |
When the amount of "live" data in the database drops below this value, cleaners will act to increase the occupancy percentage by compacting the database. |
Default value |
50 |
Allowed values |
An integer. Lower limit: 0. Upper limit: 90. |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
db-directory-permissions
Synopsis |
Specifies the permissions that should be applied to the directory containing the server database files. |
Description |
They should be expressed as three-digit octal values, which is the traditional representation for UNIX file permissions. The three digits represent the permissions that are available for the directory’s owner, group members, and other users (in that order), and each digit is the octal representation of the read, write, and execute bits. Note that this only impacts permissions on the database directory and not on the files written into that directory. On UNIX systems, the user’s umask controls permissions given to the database files. |
Default value |
700 |
Allowed values |
Any octal value between 700 and 777 (the owner must always have read, write, and execute permissions on the directory). |
Multi-valued |
No |
Required |
No |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
Yes |
Read-only |
No |
db-durability
Synopsis |
Configures the durability level that will be used when committing a transaction. |
Description |
High levels of durability offer a greater guarantee that the transaction is persisted to disk, but trade that off for lower performance. |
Default value |
medium |
Allowed values |
|
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
db-evictor-core-threads
Synopsis |
Specifies the core number of threads in the eviction thread pool. |
Description |
Specifies the core number of threads in the eviction thread pool. These threads help keep memory usage within cache bounds, offloading work from application threads. db-evictor-core-threads, db-evictor-max-threads and db-evictor-keep-alive are used to configure the core, max and keepalive attributes for the eviction thread pool. |
Default value |
1 |
Allowed values |
An integer. Lower limit: 0. Upper limit: 2147483647. |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
db-evictor-keep-alive
Synopsis |
The duration that excess threads in the eviction thread pool will stay idle. After this period, idle threads will terminate. |
Description |
The duration that excess threads in the eviction thread pool will stay idle. After this period, idle threads will terminate. db-evictor-core-threads, db-evictor-max-threads and db-evictor-keep-alive are used to configure the core, max and keepalive attributes for the eviction thread pool. |
Default value |
600s |
Allowed values |
|
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
db-evictor-max-threads
Synopsis |
Specifies the maximum number of threads in the eviction thread pool. |
Description |
Specifies the maximum number of threads in the eviction thread pool. These threads help keep memory usage within cache bounds, offloading work from application threads. db-evictor-core-threads, db-evictor-max-threads and db-evictor-keep-alive are used to configure the core, max and keepalive attributes for the eviction thread pool. |
Default value |
10 |
Allowed values |
An integer. Lower limit: 1. Upper limit: 2147483647. |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
db-log-file-max
Synopsis |
Specifies the maximum size of each individual database log file. |
Default value |
1gb |
Allowed values |
|
Multi-valued |
No |
Required |
No |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
Yes |
Read-only |
No |
db-log-filecache-size
Synopsis |
Specifies the size of the file handle cache. |
Description |
The file handle cache is used to keep as much opened log files as possible. When the cache is smaller than the number of logs, the database needs to close some handles and open log files it needs, resulting in less optimal performances. Ideally, the size of the cache should be higher than the number of files contained in the database. Make sure the OS number of open files per process is also tuned appropriately. |
Default value |
200 |
Allowed values |
An integer. Lower limit: 3. Upper limit: 2147483647. |
Multi-valued |
No |
Required |
No |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
Yes |
Read-only |
No |
db-log-verifier-schedule
Synopsis |
Specifies when the background log verifier should run if enabled. By default, verification is performed every day at midnight, local time. |
Description |
The schedule is specified using a Crontab style format string as defined in https://en.wikipedia.org/wiki/Cron#Configuration_file. Note that times and dates are specified in local time, not UTC time. If the verifier is already running at the scheduled time, the scheduled run is skipped. |
Default value |
0 0 * * * |
Allowed values |
A crontab format string (minute hour day month dayofweek). |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
db-logging-file-handler-on
Synopsis |
Indicates whether the database should maintain a je.info file in the same directory as the database log directory. |
Description |
This file contains information about the internal processing performed by the underlying database. |
Default value |
true |
Allowed values |
true false |
Multi-valued |
No |
Required |
No |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
Yes |
Read-only |
No |
db-logging-level
Synopsis |
Specifies the log level that should be used by the database when it is writing information into the je.info file. |
Description |
The database trace logging level is (in increasing order of verbosity) chosen from: OFF, SEVERE, WARNING, INFO, CONFIG, FINE, FINER, FINEST, ALL. |
Default value |
CONFIG |
Allowed values |
A string. |
Multi-valued |
No |
Required |
No |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
Yes |
Read-only |
No |
db-num-cleaner-threads
Synopsis |
Specifies the number of threads that the backend should maintain to keep the database log files at or near the desired utilization. |
Description |
In environments with high write throughput, multiple cleaner threads may be required to maintain the desired utilization. |
Default value |
Let the server decide. |
Allowed values |
An integer. Lower limit: 1. |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
db-num-lock-tables
Synopsis |
Specifies the number of lock tables that are used by the underlying database. |
Description |
This can be particularly important to help improve scalability by avoiding contention on systems with large numbers of CPUs. The value of this configuration property should be set to a prime number that is less than or equal to the number of worker threads configured for use in the server. |
Default value |
Let the server decide. |
Allowed values |
An integer. Lower limit: 1. Upper limit: 32767. |
Multi-valued |
No |
Required |
No |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
Yes |
Read-only |
No |
db-run-cleaner
Synopsis |
Indicates whether the cleaner threads should be enabled to compact the database. |
Description |
The cleaner threads are used to periodically compact the database when it reaches a percentage of occupancy lower than the amount specified by the db-cleaner-min-utilization property. They identify database files with a low percentage of live data, and relocate their remaining live data to the end of the log. |
Default value |
true |
Allowed values |
true false |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
db-run-log-verifier
Synopsis |
Indicates whether the background verifier should verify checksums in the database log. |
Description |
If enabled, the entire log is periodically read sequentially and verified. The schedule can be controlled using the db-log-verifier-schedule property. If the verification process detects backend database corruption then the server logs an error message and the backend is taken offline. The corrupted backend should be restored from backup before it can be used again. |
Default value |
true |
Allowed values |
true false |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
disk-full-threshold
Synopsis |
Full disk threshold to limit database updates |
Description |
When the available free space on the disk used by this database instance falls below the value specified, no updates are permitted and the server returns an UNWILLING_TO_PERFORM error. Updates are allowed again as soon as free space rises above the threshold. |
Default value |
5% of the filesystem size, plus 1 GB |
Allowed values |
Uses size syntax. |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
disk-low-threshold
Synopsis |
Low disk threshold to limit database updates |
Description |
Specifies the "low" free space on the disk. When the available free space on the disk used by this database instance falls below the value specified, protocol updates on this database are permitted only by a user with the BYPASS_LOCKDOWN privilege. |
Default value |
5% of the filesystem size, plus 5 GB |
Allowed values |
Uses size syntax. |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
entries-compressed
Synopsis |
Indicates whether the backend should attempt to compress entries before storing them in the database. |
Description |
Note that this property applies only to the entries themselves and does not impact the index data. Further, the effectiveness of the compression is based on the type of data contained in the entry. |
Default value |
false |
Allowed values |
true false |
Multi-valued |
No |
Required |
No |
Admin action required |
None Changes to this setting take effect only for writes that occur after the change is made. It is not retroactively applied to existing data. |
Advanced |
Yes |
Read-only |
No |
import-offheap-memory-size
Synopsis |
Specifies the amount of off-heap memory dedicated to the online operation (import-ldif, rebuild-index). |
Default value |
Use only heap memory. |
Allowed values |
Uses size syntax. |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
index-entry-limit
Synopsis |
Specifies the maximum number of entries that is allowed to match a given index key before that particular index key is no longer maintained. |
Description |
This property is analogous to the ALL IDs threshold in the Sun Java System Directory Server. Note that this is the default limit for the backend, and it may be overridden on a per-attribute basis. A value of 0 means there is no limit. Changing the index entry limit significantly can result in serious performance degradation. Please read the documentation before changing this setting. |
Default value |
4000 |
Allowed values |
An integer. Lower limit: 0. Upper limit: 2147483647. |
Multi-valued |
No |
Required |
No |
Admin action required |
None If any index keys have already reached this limit, indexes need to be rebuilt before they are allowed to use the new limit. |
Advanced |
Yes |
Read-only |
No |
index-filter-analyzer-enabled
Synopsis |
Indicates whether to gather statistical information about the search filters processed by the directory server while evaluating the usage of indexes. |
Description |
Analyzing indexes requires gathering search filter usage patterns from user requests, especially for values as specified in the filters and subsequently looking the status of those values into the index files. When a search requests is processed, internal or user generated, a first phase uses indexes to find potential entries to be returned. Depending on the search filter, if the index of one of the specified attributes matches too many entries (exceeds the index entry limit), the search becomes non-indexed. In any case, all entries thus gathered (or the entire DIT) are matched against the filter for actually returning the search result. |
Default value |
false |
Allowed values |
true false |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
index-filter-analyzer-max-filters
Synopsis |
The maximum number of search filter statistics to keep. |
Description |
When the maximum number of search filter is reached, the least used one will be deleted. |
Default value |
25 |
Allowed values |
An integer. Lower limit: 1. |
Multi-valued |
No |
Required |
No |
Admin action required |
None |
Advanced |
Yes |
Read-only |
No |
java-class
Synopsis |
Specifies the fully-qualified name of the Java class that provides the backend implementation. |
Default value |
org.opends.server.backends.jeb.JEBackend |
Allowed values |
A Java class that extends or implements:
|
Multi-valued |
No |
Required |
Yes |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
Yes |
Read-only |
No |
je-property
Synopsis |
Specifies the database and environment properties for the Berkeley DB Java Edition database serving the data for this backend. |
Description |
Any Berkeley DB Java Edition property can be specified using the following form: property-name=property-value. Refer to OpenDJ documentation for further information on related properties, their implications, and range values. The definitive identification of all the property parameters is available in the example.properties file of Berkeley DB Java Edition distribution. |
Default value |
None |
Allowed values |
A string. |
Multi-valued |
Yes |
Required |
No |
Admin action required |
The object must be disabled and re-enabled for changes to take effect. |
Advanced |
Yes |
Read-only |
No |