ldapcmd

Description

This is an LDAP utility that controls these features:

Feature

Description

Cache

LDAP cache operations, such as emptying the cache, as well as providing debug information.

Statistics

LDAP search statistics, such as:

  • All user searches

  • Pending lookups (when two or more lookups are identical)

  • Total lookup time (the total search time for a specific lookup)

  • Cache statistics such as hits and misses

These statistics are saved in the $FWDIR/log/ldap_pid_<Process PID>.stats file.

Logging

View the alert and warning logs.

Notes:

Syntax

ldapcmd [-d <Debug Level>] -p {<Process Name> | all} <Command>

Parameters

Parameter

Description

-d <Debug Level>

Runs the command in debug mode with the specified TDERROR debug level.

Valid values are from 0 (disabled) to 5 (maximal level, recommended).

-p {<Process Name> | all}

Runs on a specified Check Point process, or all supported Check Point processes.

<Command>

One of these commands:

  • cacheclear {all | UserCacheObject | TemplateCacheObject | TemplateExtGrpCacheObject}

    • all - Clears cache for all objects

    • UserCacheObject - Clears cache for user objects

    • TemplateCacheObject - Clears cache for template objects

    • TemplateExtGrpCacheObject - Clears cache for external template group objects

  • cachetrace {all | UserCacheObject | TemplateCacheObject | TemplateExtGrpCacheObject}

    • all - Traces cache for all objects

    • UserCacheObject - Traces cache for user objects

    • TemplateCacheObject - Traces cache for template objects

    • TemplateExtGrpCacheObject - Traces cache for external template group objects

  • log {on | off}

    • on - Creates LDAP logs

    • off - Does not create LDAP logs

  • stat {<Print Interval in Sec> | 0}

    • <Print Interval in Sec> - How frequently to collect the statistics

    • 0 - Stops collecting the statistics