Secure Global Desktop 4.40 Administration Guide > SGD Servers, Arrays, and Load Balancing > SGD Administration Console Configuration Settings

SGD Administration Console Configuration Settings

The deployment descriptor for the SGD Administration Console web application contains settings that control the operation of the SGD Administration Console. The deployment descriptor is the following file:

/opt/tarantella/webserver/tomcat/version/sgdadmin/WEB-INF/web.xml

This page describes the settings in the deployment descriptor that you might want to configure. Most of the settings are context parameters (contained in <context-param> elements). You must not change any other settings. When working with these settings, note the following:

• Only change web.xml if you understand what you are doing
• Always create and keep a backup of the original web.xml in case you need to revert to a previous version, see Backing Up and Restoring an SGD Installation for advice on how to do this
• After changing web.xml, you must always restart the SGD Web Server for the changes to take effect
• You must not change the order of the XML elements contained in web.xml

The com.sun.tta.confmgr.DisplayLimit context parameter allows you to configure the maximum number of search results you can display in the SGD Administration Console. The default is 150. If there are more results than the display limit, the SGD Administration Console displays a message. Increasing the display limit can have an effect on performance. Set the display limit to 0 to see unlimited search results.

The com.sun.tta.confmgr.LdapSearchTimeLimit context parameter allows you to configure the maximum time in milliseconds to allow for a search of an LDAP directory. The default is 0, which means the search time is unlimited. Only change this context parameter, if you have particularly slow LDAP directory servers.

The following context parameters are used to filter the display of LDAP data (when you select Local + LDAP in the Repository list) in the SGD Administration Console:

• Filters used by the navigation tree, these are the following context parameters:
  • com.sun.tta.confmgr.LdapContainerFilter
  • com.sun.tta.confmgr.LdapUserFilter
  • com.sun.tta.confmgr.LdapGroupFilter
• Filters used when you use the search to search an LDAP directory, these are the following context parameters:
  • com.sun.tta.confmgr.LdapContainerSearchFilter
  • com.sun.tta.confmgr.LdapUserSearchFilter
  • com.sun.tta.confmgr.LdapGroupSearchFilter
• Filters used when you load the LDAP assignments on the Assigned Applications tab for a user profile, the com.sun.tta.confmgr.LdapMemberFilter context parameter

These context parameters contain the definitions of what the SGD Administration Console considers as LDAP containers, users, and groups. You might want to change these filters to improve performance or to change the definition of these LDAP object types to match what is used in your LDAP directory. To avoid inconsistencies, if you change a filter for the navigation tree, you must also change the filter used for the LDAP search.

The session-timeout setting defines the period of time after which the user is logged out if there is no activity (no HTTP requests) in SGD Administration Console. The default is 30 minutes.

Copyright © 1997-2007 Sun Microsystems, Inc. All rights reserved.