Configutil Reference

From Messaging Server Technical Reference Wiki
Jump to: navigation, search


alarm.diskavail.msgalarmdescription
Description for the diskavail alarm
For more information see description Option.

Syntax: string

Default: percentage mail partition diskspace available

alarm.diskavail.msgalarmstatinterval (seconds)
Interval (seconds) between checks of disk availability
For more information see statinterval Option.

Syntax: int32

Default: 3600

alarm.diskavail.msgalarmthreshold
Disk space available percentage triggering alarm
For more information see threshold Option.

Syntax: int32

Default: 10

alarm.diskavail.msgalarmthresholddirection
Alarm when disk space is above vs. below threshold
For more information see thresholddirection Option.

Syntax: int32

Default: -1

alarm.diskavail.msgalarmwarninginterval (hours)
Time (hours) between alarms re disk availability
For more information see warninginterval Option.

Syntax: int32

alarm.msgalarmnoticehost
SMTP host to which msprobe submits any alarm messages
For more information see noticehost Option.

Updated in release: 8.0.2.2

Syntax: host

Default setting is computed; see text for details

alarm.msgalarmnoticeport
SMTP port to which msprobe submits any alarm messages
For more information see noticeport Option.

Updated in release: 8.1

Syntax: uint16

Default: 587

alarm.msgalarmnoticercpt
Recipient of msprobe alarm messages
For more information see noticercpt Option.

Syntax: non-empty-string

Default setting is computed; see text for details

alarm.msgalarmnoticesender
From: address on msprobe alarm messages
For more information see noticesender Option.

Syntax: non-empty-string

Default setting is computed; see text for details

alarm.serverresponse.msgalarmdescription
Description for the serverresponse alarm
For more information see description Option.

Syntax: string

Default: server response time in seconds

alarm.serverresponse.msgalarmstatinterval (seconds)
Interval (seconds) between checks of server responsiveness
For more information see statinterval Option.

Syntax: int32

Default: 600

alarm.serverresponse.msgalarmthreshold
Server response time (seconds) triggering alarm
For more information see threshold Option.

Syntax: int32

Default: 10

alarm.serverresponse.msgalarmthresholddirection
Alarm when server response time is above vs. below threshold
For more information see thresholddirection Option.

Syntax: int32

Default: 1

alarm.serverresponse.msgalarmwarninginterval (hours)
Time (hours) between alarms re server non-response
For more information see warninginterval Option.

Syntax: int32

alarm.smtpauthpassword
Admin password msprobe uses to authenticate to SMTP server
For more information see smtpauthpassword Option.

Introduced in release: 8.1

Syntax: password

This feature is disabled unless this option is set

alarm.smtpauthuser
Admin user msprobe uses to authenticate to SMTP server
For more information see smtpauthuser Option.

Introduced in release: 8.1

Syntax: non-empty-string

This feature is disabled unless this option is set

alarm.smtptls
Whether alarm uses TLS for its SMTP connections
For more information see smtptls Option.

Syntax: bool

Default: 0

elasticsearch.hostlist
List of elasticearch hosts
For more information see hostlist Option.

Introduced in release: 8.0.2.2

Syntax: host-list

This feature is disabled unless this option is set

elasticsearch.numreplicas
elasticsearch number of replicas
For more information see numreplicas Option.

Introduced in release: 8.0.2.2

Syntax: int32

Default: 1

elasticsearch.numshards
elasticsearch number of shards
For more information see numshards Option.

Introduced in release: 8.0.2.2

Syntax: int32

Default: 5

elasticsearch.port
elasticsearch default port number
For more information see port Option.

Introduced in release: 8.0.2.2

Syntax: uint16

Default: 9200

elasticsearch.storesource
elasticsearch _source field enabled
For more information see storesource Option.

Introduced in release: 8.0.2.2

Syntax: bool

Default: 1

encryption.rsa.nssslpersonalityssl
SSL/TLS certificate nicknames to offer clients
For more information see sslnicknames Option.

Syntax: string

Default: Server-Cert

gen.accounturl

The accounturl base option specifies the location of the server administration resource for end users (obsolete).

Syntax: url

gen.filterurl

The filterurl base option specifies the URL for incoming mail (server side) filter (obsolete).

Syntax: url

gen.folderurl

The folderurl base option specifies the URL for personal folder management (obsolete).

Syntax: url

gen.installedlanguages

The installedlanguages base option takes a comma separated list of language codes: alphabetic characters only, comma separated list (e.g. "en, fr"). This is identical to RFC 2068's Accept-Language: field definition, but with no q-value.

Syntax: non-empty-string

Default: en,de,fr,es,ja,ko,zh-CN,zh-TW

gen.listurl

The listurl base option specifies the URL for mailing list management (obsolete).

Syntax: url

gen.newuserforms

The welcomemsg  Base option specifies a default welcome message for new users of the Message Store. The maximum size is 1 MB.

Syntax: "$" line separators, with headers.

Note that the base value can be localized using the welcomemsg option set under named message_language groups.

This default welcome message message specified at base level is only used if there is no domain-specific welcome message in a preferred language (no mailDomainWelcomeMessage tagged with a preferred language) set on the LDAP entry of the domain in which the new user resides.

Syntax: non-empty-string

gen.newuserforms;lang-*

The welcomemsg option specified under a named message_language specifies a localized welcome message for new Message Store users. The maximum size is 1 MB.

Syntax: "$" line separators, with headers.

Syntax: non-empty-string

gen.pwchangeurl
Specify the URL a user visits to change his/her password
For more information see pwchangeurl Option.

Introduced in release: 7.0.5

Syntax: url

gen.sitelanguage
Default language tag
For more information see sitelanguage Option.

Syntax: non-empty-string

Default: en

local.autorestart
Enable autorestart of failed or unresponsive servers
For more information see enable Option.

Syntax: bool

Default: 1

local.autorestart.timeout (seconds)
Stop trying to restart after failure retry timeout (seconds)
For more information see timeout Option.

Syntax: uint32

Default: 600

local.canonicalsearchfilter
Search filter for locating users by canonical domain
For more information see canonicalsearchfilter Option.

Introduced in release: 7.0.5

Updated in release: 8.0.2

Syntax: non-empty-string

Default: (&(%P=%U)(objectclass=inetmailuser))

local.dblockcount

The dblockcount base option sets the maximum number of BDB locks. The minimum allowed value is 5000; the maximum is 500000.

Introduced in release: 7.0.5

Syntax: enumint

Default: 50000

local.dbtxnsync
Message Store database transaction synchronization level
For more information see dbtxnsync Option.

Syntax: int32

Default: 0

local.debugkeys

The debugkeys base option specifies a space-separated list of keywords used to enable various optional debugging facilities; see Keywords That May Be Included in debugkeys Option Value.

Note that the SMTP server's AUTH_DEBUG TCP/IP-channel-specific option can override debugkeys for SMTP server authentication purposes.

For Message Store and other non-MTA processes, setting a relevant debugkey will enable NOTICE-level logging in the logfile for that process. The MTA has a different logging model and requires two additional settings to see debugging associated with a debugkey. First, MTA debug log files must be enabled (via master_debug, slave_debug, or the equivalent finer-grained mechanism). Second, it's necessary to set mta.mm_debug to a value of at least 3 for the DKIM-related debugkeys or to set mta.os_debug to 1 for the LDAP and authentication-related debugkeys.

Introduced in release: 7.0.5

Updated in release: 8.0.2.2

Syntax: name-list

local.deploymap.capability.starttls
Enable the STARTTLS Deployment Map capability
For more information see capability_starttls Option.

Introduced in release: 8.0

Syntax: bool

Default: 1

local.deploymap.debug
Enable Deployment Map server and client debug output
For more information see debug Option.

Introduced in release: 8.0

Syntax: int32

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.deploymap.enable
Enable Deployment Map service
For more information see enable Option.

Introduced in release: 8.0

Syntax: bool

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.deploymap.heartbeat (minutes)

Deployment Map clients keep their TCP connection open indefinitely to the Deployment Map server. Typically, there is only traffic over the connection when a client connects or disconnects or a change is made to the deployment map. Consequently, the TCP connection can remain silent for hours if not days. To prevent network hardware from closing the connection due to inactivity, the client periodically sends a simple heartbeat to the server. By default, this heartbeat is sent every 30 minutes plus or minus a random number of seconds. The period of this heartbeat is controlled with this option. To disable heartbeats entirely, specify a value of 0.

Introduced in release: 8.0

Syntax: uint31

Default: 30

local.deploymap.passwd

Introduced in release: 8.0

Syntax: non-empty-password

local.deploymap.port
Port on which Deployment Map server listens
For more information see port Option.

Introduced in release: 8.0

Syntax: uint16

Default: 4570

local.deploymap.run_as_server
Run as Deployment Map server
For more information see run_as_server Option.

Introduced in release: 8.0

Syntax: bool

Default: 0

local.deploymap.serverhost
Host name of the remote Deployment Map server
For more information see server_host Option.

Introduced in release: 8.0

Syntax: host

local.deploymap.sslusessl
Whether to enable SSL for incoming connections
For more information see sslusessl Option.

Introduced in release: 8.0

Updated in release: 8.0

Syntax: bool

Default: 0

local.deploymap.userid

userid and passwd Options

userid and passwd Options

The userid and passwd Deployment Map options (local.deploymap.userid and local.deploymap.passwd for legacy config) are the shared secret pair used by Deployment Map clients to authenticate with the Deployment Map server. They will be sent in the clear unless the use of SSL has been enabled with the deploymap.sslusessl Deployment Map option (local.deploymap.sslusessl in legacy configuration).

A password and userid pair must be used in order for a client to connect to the Deployment Map server and be recognized by the server as being online. Without the authentication pair, a client may only request the current deployment map file and list of online hosts. This shared secret pair must also be used to add or remove a host from the deployment map file.

Introduced in release: 8.0

Syntax: non-empty-password

local.dispatcher.enable
Enable dispatcher
For more information see enable Option.

Introduced in release: 8.0

Syntax: bool

Default setting is computed; see text for details

local.domainmap.debuglevel
Set debug level for domainmap
For more information see debug Option.

Syntax: int32

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.enablelastaccess
Enable tracking of last access time to Message Store
For more information see enablelastaccess Option.

Syntax: bool

Default: 0

local.ens.enable
Enable the ENS server upon start-msg startup
For more information see enable Option.

Updated in release: 8.0

Syntax: bool

Default setting is computed; see text for details

local.ens.enablesslport

The enablesslport ENS option sets whether or not ENS over SSL service is started. Note that the ens.sslport option controls what port is the ENS+SSL port.

Introduced in release: 8.0.1

Syntax: bool

Default: 0

local.ens.mustauthenticate
whether authentication is required by ens
For more information see mustauthenticate Option.

Introduced in release: 8.0.1

Syntax: bool

Default: 0

local.ens.port
TCP port ENS server listens on
For more information see port Option.

Syntax: uint16

Default: 7997

local.ens.secret
Secret used to authenticate ENS clients with the ENS server
For more information see secret Option.

Introduced in release: 8.0.1

Syntax: password

local.ens.sslnicknames

The sslnicknames ENS option specifies a list of SSL/TLS server certificate nicknames (only one per certificate type) for HTTP to offer clients if SSL/TLS enabled. Overrides for HTTP the base level sslnicknames option (corresponding to the legacy configuration encryption.rsa.nssslpersonalityssl configutil parameter).

Introduced in release: 8.0.1

Syntax: string

Default: Server-Cert

local.ens.sslport
Port on which the ENS+SSL server listens
For more information see sslport Option.

Introduced in release: 8.0.1

Syntax: uint16

Default: 8997

local.ensloglevel

The loglevel ENS option specifies the level of ENS client library logging to the process nslog file. Messages are also filtered per the loglevel of the process. Allowed values are as in the Unified Configuration logfile.loglevel option (logfile.*.loglevel in legacy configuration). But note that the value "debug" generates lots of data and is not recommended.

Syntax: enumstrcase

Default: information

local.hostname
Fully qualified DNS hostname of this mail server
For more information see hostname Option.

Syntax: host

local.http.altservice
Use "mshttp" service name in mailAllowedServiceAccess check
For more information see altservice Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 0

local.http.convergencefilterenabled
Indicate whether the Convergence HTML filter is enabled
For more information see convergencefilterenabled Option.

Introduced in release: 8.0.2

Syntax: bool

Default: 0

local.http.enableblacklistfilter
Enable legacy blacklist HTML Sanitizer
For more information see enableblacklistfilter Option.

Introduced in release: 8.0.2

Syntax: bool

Default: 0

local.http.enableuserlist
Enable imsconnutil connected user list for MSHTTP
For more information see enableuserlist Option.

Syntax: bool

Default: 0

local.http.forcetelemetry
Force telemetry for all MSHTTP users
For more information see forcetelemetry Option.

Syntax: bool

Default: 0

local.http.replayformat

The replayformat MSHTTPD option, http.replayformat, specifies the format for authentication replay from mshttpd to IMAP and MTA backends. Supports:

%o for original userid as sent by the client, %s for user@domain, %U for userid only (prior to LDAP lookup), %V for virtual domain, %A[attr] for value of specified user's attribute.

Introduced in release: 7 Update 3 patch 13

Syntax: string

local.http.sslnicknames
SSL/TLS MSHTTP server certificate nicknames
For more information see sslnicknames Option.

Syntax: string

This feature is disabled unless this option is set

local.icapservice.forcetelemetry

Setting the forcetelemetry icapservice option to 1 forces telemetry for all users. Warning: this generates a lot of data and should not be used on a production system.

Introduced in release: 8.0.1

Syntax: bool

Default: 0

local.imap.adminbypassquota
Admin users can bypass quota enforcement for IMAP APPEND
For more information see adminbypassquota Option.

Syntax: bool

Default: 0

local.imap.broken_client_defer_exists
Defer IMAP exists notification workaround
For more information see broken_client_defer_exists Option.

Introduced in release: 8.0.2.1

Syntax: bool

Default: 0

local.imap.diacritical_sensitive_languages
Use diacritical sensitive IMAP search for these languages
For more information see diacritical_sensitive_languages Option.

Introduced in release: 8.0.1.1.0

Syntax: printable-ascii-string-list

local.imap.enableuserlist
Enable imsconnutil connected user list for IMAP
For more information see enableuserlist Option.

Syntax: bool

Default: 0

local.imap.fixinternaldate
Fix IMAP internaldate for appended messages if no valid date
For more information see fixinternaldate Option.

Introduced in release: 6.2 patch 5

Syntax: bool

Default: 1

local.imap.forcetelemetry
Force telemetry for all IMAP users
For more information see forcetelemetry Option.

Syntax: bool

Default: 0

local.imap.immediateflagupdate
Update \Seen and \Deleted flags immediately to aid IMAP IDLE
For more information see immediateflagupdate Option.

Updated in release: 7.0.5

Syntax: bool

Default: 1

local.imap.logauthsessionid
Include number session id in auth response IMAP log entries
For more information see logauthsessionid Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 0

local.imap.logcommands
Record sanitized IMAP client commands in imapcmd log file
For more information see logcommands Option.

Introduced in release: 7.0.5.34

Syntax: bool

Default: 0

local.imap.logprotocolerrors
Log IMAP protocol errors as debug messages
For more information see logprotocolerrors Option.

Syntax: uint32

Default: 0

local.imap.maxnoops
Max # of IMAP NOOP commands before connection will be closed
For more information see maxnoops Option.

Syntax: uint32

Default: 0

local.imap.maxprotocolerrors
Max # of protocol errors before IMAP connection is closed
For more information see maxprotocolerrors Option.

Syntax: uint32

Default: 9999

local.imap.maxsearchmailboxes

The maxsearchmailboxes IMAP option specifies the maximum number of mailboxes that may be searched by one IMAP ESEARCH command. If this limit is exceeded, the search command will return an error. Setting this to 0 results in no limit.

Introduced in release: 7.0.5.31.0

Syntax: uint32

Default: 1000

local.imap.maxsearchnest

The maxsearchnest IMAP option specifies the maximum nesting depth in an IMAP SEARCH command. If this limit is exceeded, the search command will return an error. Nesting of at least 20 levels is always permitted regardless of this setting.

Introduced in release: 8.0.1.3.0

Syntax: uint32

Default: 256

local.imap.polldelay (milliseconds)

Solaris-only. The polldelay (IMAP and MMP) option specifies the wait time before calling poll() in milliseconds. Workaround for poll performance bug on Solaris (6438988, 6379476). Setting this to -1 activates a different workaround as of 7 update 4 patch 24. The alternate code tries to keep the size of the poll array relatively constant and instead uses -1 in the poll array for inactive descriptors. The poll array will be larger, but change size less frequently. To date this appears to noticably improve performance under stress.

The default has changed from 1 to -1 in the Messaging Server 7.0.5 release. In addition, poll is no longer used in the Messaging Server 7.0.5 release (and thus this option is ignored) unless preferpoll is set.

Updated in release: 7.0.5

Syntax: int32

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.imap.pwexpirealert.firstwarn (seconds)
Seconds before password expire at which to send IMAP ALERT
For more information see firstwarn Option.

Introduced in release: 7.0.5

Syntax: int32

Default: 0

local.imap.pwexpirealert.metermaidtable
Name of the MeterMaid table for password expiration alerts
For more information see metermaidtable Option.

Introduced in release: 7.0.5

Syntax: string

Default: pwexpirealert

local.imap.pwexpirealert.viametermaid
Use MeterMaid for password expiration limits
For more information see viametermaid Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 0

local.imap.sslnicknames
SSL/TLS IMAP server certificate nicknames
For more information see sslnicknames Option.

Syntax: string

This feature is disabled unless this option is set

local.imta.enable
Enable the MTA upon start-msg startup
For more information see enable Option.

Syntax: bool

Default: 0

local.imta.hostnamealiases
Local host aliases
For more information see ldap_host_alias_list Option.

Updated in release: 7.0.5.36

Syntax: ascii-string

This feature is disabled unless this option is set

local.imta.mailaliases
Specify LDAP attributes in which aliases may be stored
For more information see ldap_mail_aliases MTA option.

Syntax: non-empty-string

Default setting is computed; see text for details

local.imta.schematag
The tag (name) of the schema in use; e.g., ims50
For more information see ldap_schematag MTA option.

Syntax: non-empty-string

Default setting is computed; see text for details

local.imta.sslnicknames
SSL/TLS server certificate nicknames the MTA will offer
For more information see sslnicknames Option.

Introduced in release: 7 Update 4

Syntax: string

This feature is disabled unless this option is set

local.instancename
Option solely for migration to Unified Conifg
For more information see instancename Option.

Introduced in release: 8.0

Syntax: host

local.ipv6.in

When set to a value of 1, the ipv6in option instructs Messaging Server to accept inbound IPv6 connections for all services provided that the host has at least one network interface configured for IPv6. Services specifically configured to listen on only IPv4 interfaces cannot also accept inbound IPv6 connections. When set to a value of 0, inbound IPv6 connections are not allowed.

Inbound IPv4 connections will always be permitted.

Introduced in release: 7 Update 1

Syntax: bool

local.ipv6.out

When set to a value of 1, the ipv6out option instructs Messaging Server to attempt outbound IPv6 connections for all services provided that the host has at least one network interface configured for IPv6. Services specifically configured to bind their source IP address only to IPv4 interfaces cannot attempt IPv6 outbound connections. For example, an SMTP client bound to a specific IPv4 interface cannot then establish an outbound IPv6 connection. When set to a value of 0, outbound IPv6 connections are not allowed.

When set to a value of 1, outbound services will attempt DNS lookups of both A and AAAA records. Connection attempts will then be made in the order dictated by the ipv6sortorder option. Note the DNS lookups will always request A records. This option only controls whether or not AAAA records are also requested.

Introduced in release: 7 Update 1

Syntax: bool

local.ipv6.sortorder

The ipv6sortorder option controls the order in which IPv4 (A) and IPv6 (AAAA) DNS address records are used when attempting connections to other named systems.

ipv6sortorder Option Values
Value Behavior
default Process A and AAAA records in the order returned by the operating system.
aProcess only A records; ignore AAAA records.
aaaa Process only AAAA records; ignore A records.
a-aaaa Process A records, then AAAA records.
aaaa-a Process AAAA records, then A records

Introduced in release: 7 Update 1

Syntax: enumstr

local.ipv6.usegethostbyname
RESTRICTED: Use gethostbyname() for host to IP lookups
For more information see ipv6usegethostbyname Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.job_controller.enable
Enable Job Controller
For more information see enable Option.

Introduced in release: 8.0

Syntax: bool

Default setting is computed; see text for details

local.ldapconnecttimeout (seconds)
Time (seconds) to wait for a new LDAP connection to complete
For more information see ldapconnecttimeout Option.

Syntax: int32

Default: 10

local.ldapmodifytimeout
Time (seconds) for LDAP modify operations to complete
For more information see ldapmodifytimeout Option.

Syntax: int32

Default: 60

local.ldappoolrefreshinterval (minutes)
Time (minutes) LDAP connections are maintained
For more information see ldappoolrefreshinterval Option.

Syntax: int32

Default: 35

local.ldapsearchtimeout (seconds)
Time (seconds) to wait for an LDAP search to complete
For more information see ldapsearchtimeout Option.

Syntax: int32

Default: 60

local.ldaptrace
DEPRECATED: See alternative debugkeys
For more information see ldaptrace Option.

Deprecated in release: 7.0.5

Syntax: bool

Default: 0

local.legacy_proxyauth
Enable legacy proxy authorization IMAP PROXYAUTH command
For more information see legacy_proxyauth Option.

Introduced in release: 8.0

Syntax: bool

Default: 0

local.lockdir
Full pathname of the lock directory
For more information see lockdir Option.

Syntax: absdirpath

Default setting is computed; see text for details

local.metermaid.enable
Enable MeterMaid
For more information see enable Option.

Syntax: bool

Default: 0

local.mfagent.debug

Set a bit mask for various types of debugging. DELETED: Removed in 7 Update 3.

Deleted in release: 7 Update 3

Syntax: int32

Default: 0

local.mmp.enable
Enable the MMP service on start-msg startup
For more information see enable Option.

Syntax: bool

Default: 0

local.msgtrace.active
Enable Message Store message tracing
For more information see activate Option.

Updated in release: 8.1

Syntax: printable-ascii-string

Default: transactlog

local.obsoleteimap
Allow old IMAP2bis and IMAP4 commands
For more information see obsoleteimap Option.

Syntax: bool

Default: 1

local.pop.forcetelemetry
Force telemetry for all POP users
For more information see forcetelemetry Option.

Syntax: bool

Default: 0

local.pop.lockmailbox
Allow only one POP session at a time to access mailbox
For more information see lockmailbox Option.

Syntax: bool

Default: 0

local.pop.logprotocolerrors
Log POP protocol errors as debug messages
For more information see logprotocolerrors Option.

Syntax: uint32

Default: 0

local.pop.maxprotocolerrors
Max # of protocol errors before POP connection is closed
For more information see maxprotocolerrors Option.

Syntax: uint32

Default: 9999

local.pop.sslnicknames
SSL/TLS POP server certificate nicknames
For more information see sslnicknames Option.

Syntax: string

This feature is disabled unless this option is set

local.poplogmboxstat
Include mailbox statistics on login/logout in POP log file
For more information see poplogmboxstat Option.

Syntax: bool

Default: 0

local.popstatuskludge
RESTRICTED: On-the-fly Status: header indicates read/unread
For more information see popstatuskludge Option.

Syntax: bool

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.preferpoll

To improve performance, the IMAP and MMP servers use Solaris Event Completion Ports on Solaris instead of the poll system call starting with the Messaging Server 7.0.5 release. Since the Messaging Server 8.0.1 release, the servers use epoll on Linux instead of the poll system call. Setting the preferpoll option (available at base and MMP level) to 1 will revert to use of the standard Posix poll API instead. When preferpoll is set to 1, then the polldelay option also applies.

Introduced in release: 7.0.5

Updated in release: 8.0.1

Syntax: bool

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.probe.cert.timeout (seconds)
Time (seconds) of non-response before restarting Cert server
For more information see timeout Option.

Syntax: uint32

Default: 0

local.probe.cert.warningthreshold (seconds)
Time (seconds) msprobe of Certificate service before warning
For more information see warningthreshold Option.

Syntax: int32

local.probe.deploymap.timeout (seconds)
Time of non-response before restarting deployment map
For more information see timeout Option.

Introduced in release: 8.0

Syntax: uint32

Default: 0

local.probe.deploymap.warningthreshold (seconds)
Time msprobe of the deployment map server before warning
For more information see warningthreshold Option.

Introduced in release: 8.0

Syntax: int32

local.probe.ens.timeout (seconds)
Time (seconds) of non-response before restarting ENS server
For more information see timeout Option.

Introduced in release: 6.3-0.15

Syntax: uint32

Default: 0

local.probe.ens.warningthreshold (seconds)
Time (seconds) msprobe of ENS server before warning
For more information see warningthreshold Option.

Introduced in release: 6.3-0.15

Syntax: int32

local.probe.http.timeout (seconds)
Time (seconds) of non-response before restarting MSHTTPD
For more information see timeout Option.

Syntax: uint32

Default: 0

local.probe.http.warningthreshold (seconds)
Time (seconds) msprobe of mshttpd before warning
For more information see warningthreshold Option.

Syntax: int32

local.probe.imap.timeout (seconds)
Time (seconds) of non-response until restart IMAP* server(s)
For more information see timeout Option.

Syntax: uint32

Default: 0

local.probe.imap.warningthreshold (seconds)
Time (seconds) msprobe of IMAP server before warning
For more information see warningthreshold Option.

Syntax: int32

local.probe.isc.timeout (seconds)
Time of non-response before restarting isc
For more information see timeout Option.

Introduced in release: 8.0.2.3

Syntax: uint32

Default: 0

local.probe.isc.warningthreshold (seconds)
Time (seconds) msprobe of ISC server before warning
For more information see warningthreshold Option.

Introduced in release: 8.0.2.3

Syntax: int32

local.probe.job_controller.timeout (seconds)
Time (seconds) of non-response before restart Job Controller
For more information see timeout Option.

Syntax: uint32

Default: 0

local.probe.job_controller.warningthreshold (seconds)
Time (seconds) msprobe of Job Controller before warning
For more information see warningthreshold Option.

Syntax: int32

local.probe.lmtp.timeout (seconds)
Time (seconds) LMTP non-response before restart Dispatcher
For more information see timeout Option.

Syntax: uint32

Default: 0

local.probe.lmtp.warningthreshold (seconds)
Time (seconds) msprobe of LMTP server before warning
For more information see warningthreshold Option.

Syntax: int32

local.probe.metermaid.timeout (seconds)
Time (seconds) of non-response before restarting MeterMaid
For more information see timeout Option.

Introduced in release: 7 Update 1

Syntax: uint32

Default: 0

local.probe.metermaid.warningthreshold (seconds)
Time (seconds) msprobe of MeterMaid server before warning
For more information see warningthreshold Option.

Introduced in release: 7 Update 1

Syntax: int32

local.probe.pop.timeout (seconds)
Time (seconds) of non-response til restart POP* server(s)
For more information see timeout Option.

Syntax: uint32

Default: 0

local.probe.pop.warningthreshold (seconds)
Time (seconds) msprobe of POP server before warning
For more information see warningthreshold Option.

Syntax: int32

local.probe.smtp.timeout (seconds)
Time (s) SMTP non-response until restart Dispatcher
For more information see timeout Option.

Syntax: uint32

Default: 0

local.probe.smtp.warningthreshold (seconds)
Time (seconds) msprobe of SMTP server before warning
For more information see warningthreshold Option.

Syntax: int32

local.probe.submit.timeout (seconds)
SMTP SUBMIT/SMTP+SSL non-response before restart Dispatcher
For more information see timeout Option.

Syntax: uint32

Default: 0

local.probe.submit.warningthreshold (seconds)
Time (seconds) msprobe of SMTP SUBMIT server before warning
For more information see warningthreshold Option.

Syntax: int32

local.probe.warningthreshold (seconds)
Default time (seconds) for msprobe probes before warning
For more information see warningthreshold Option.

Syntax: int32

Default: 25

local.projectid
Numeric id MS uses when obtaining shared memory segments
For more information see projectid Option.

Introduced in release: 7 Update 3

Syntax: uint32

Default: 7

local.properties
Deployment map initial config information transfer
For more information see properties Option.

Introduced in release: 8.0.2

Syntax: printable-ascii-string-list

local.purge.enable
Enable purge server on start-msg startup
For more information see enable Option.

Syntax: bool

Default setting is computed; see text for details

local.queuedir

The queuedir msprobe option specifies the full pathname of spool directory or local queue directory to be monitored by msprobe. On an MTA system, to have msprobe monitor the MTA queue area, set this option to DATAROOT/queue/; since this option has no default value, leaving it unset means that msprobe will not monitor the MTA queue area.

Syntax: absdirpath

This feature is disabled unless this option is set

local.rbac
Enable use of Role-Based Access Controls on Solaris
For more information see rbac Option.

Syntax: bool

Default: 0

local.rfc822header.allow8bit
Allow 8-bit characters in headers in Messenger Express
For more information see rfc822headerallow8bit Option.

Syntax: bool

Default: 0

local.rolename
Option solely for migration to Unified Conifg
For more information see rolename Option.

Introduced in release: 8.0

Syntax: host

local.rollovermanager.enable
enable rollovermanager service
For more information see enable Option.

Introduced in release: 8.0

Syntax: bool

Default: 1

local.sched.enable
Enable the Scheduler service on start-msg startup
For more information see enable Option.

Syntax: bool

Default: 0

local.schedule.*
Intervals (crontab format) at which to run a task
For more information see crontab Option.

Syntax: non-empty-string

local.schedule.*.enable
Enable a task in the Scheduler
For more information see enable Option.

Syntax: bool

Default: 0

local.schedule.enablelog

To enable output from the Scheduler's tasks to go to separate log files in the DATAROOT/log directory, set enablelog to 1. This creates logfiles named <task-name>.log.<unix-timestamp> each time a scheduler task is executed. These log files are not removed automatically, so customers using this option will need to configure their own mechanism to remove older log files of this format.

This option is not refreshable; the scheduler must be stopped and restarted if this option is changed.

Introduced in release: 8.0

Syntax: bool

Default: 0

local.schedule.expire.enable
Enable the Scheduler to run the expire task
For more information see enable Option.

Syntax: bool

local.schedule.msprobe.enable
Enable the Scheduler to run msprobe
For more information see enable Option.

Syntax: bool

Default: 1

local.schedule.purge.enable
Enable the Scheduler to run the MTA's log file purge task
For more information see enable Option.

Syntax: bool

Default setting is computed; see text for details

local.schedule.return_job
Intervals (crontab format) at which to run return_job
For more information see crontab Option.

Syntax: non-empty-string

local.schedule.return_job.enable
Enable the Scheduler to run the message bounce return_job
For more information see enable Option.

Syntax: bool

Default setting is computed; see text for details

local.schedule.snapshot.enable
Enable the Schedule to run the snapshot/verify task
For more information see enable Option.

Syntax: bool

Default setting is computed; see text for details

local.schedule.snapshotverify.enable
Enable the Scheduler to run the snapshot log verify task
For more information see enable Option.

Syntax: bool

Default setting is computed; see text for details

local.serveruid
DEPRECATED: use the user option in restricted.cnf
For more information see serveruid Option.

Updated in release: 8.0

Syntax: non-empty-string

local.service.http.allowcollect
Enable/disable remote POP mailbox collection
For more information see allowcollect Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 1

local.service.http.allowldapaddresssearch
Allow legacy webmail clients to search LDAP for addresses
For more information see allowldapaddresssearch Option.

Syntax: bool

Default: 0

local.service.http.charsetvalidation
NOT RECOMMENDED: Disable MSHTTP charset validation
For more information see charsetvalidation Option.

Syntax: bool

Default: 1

local.service.http.cookiename
Specify a cookie name used to pass the HTTP sessions ID
For more information see cookiename Option.

Syntax: non-empty-string

Default setting is computed; see text for details

local.service.http.detectcharset

The detectcharset option for mshttpd enables automatic character set detection for unlabeled text parts supplied by Convergence.

Syntax: bool

Default: 0

local.service.http.filterhiddenmailinglists
Whether to respect mgmanhidden LDAP attribute in searching
For more information see filterhiddenmailinglists Option.

Syntax: bool

Default: 1

local.service.http.forcenbsptospace
Convert NBSP to SP in text and HTML
For more information see forcenbsptospace Option.

Introduced in release: 7.0.5.35.0

Syntax: bool

Default: 0

local.service.http.generatereceivedheader
Webmail generates Received: header (showing sender IP)
For more information see generatereceivedheader Option.

Syntax: bool

Default: 1

local.service.http.gzip.attach
Enable attachment download gzip for IE clients
For more information see gzipattach Option.

Syntax: bool

Default: 0

local.service.http.gzip.dynamic
Enable/disable compression of dynamic content
For more information see gzipdynamic Option.

Syntax: bool

Default: 1

local.service.http.gzip.static
Enable/disable compression of static content
For more information see gzipstatic Option.

Syntax: bool

Default: 1

local.service.http.htmlprocessor
Convergence HTML mail processor & sanitizer control
For more information see htmlprocessor Option.

Introduced in release: 7 Update 4

Updated in release: 8.0.1

Syntax: enumint

Default: 1

local.service.http.ims5compat
iMS 5.2 compatibility with 6.x MEM
For more information see ims5compat Option.

Syntax: bool

Default: 0

local.service.http.ldapaddresssearchattrs
LDAP attributes webmail returns for LDAP address search
For more information see ldapaddresssearchattrs Option.

Syntax: non-empty-string

Default: cn,mail,sn,telephoneNumber,uid

local.service.http.maxcollectmsglen
Max message size to collect from a remote POP mailbox
For more information see maxcollectmsglen Option.

Syntax: uint32

Default: 104857600

local.service.http.maxldaplimit
Maximum LDAP lookup limit for MSHTTP
For more information see maxldaplimit Option.

Syntax: uint32

Default: 500

local.service.http.nofilecache
Disable HTML files caching, for debug purposes
For more information see nofilecache Option.

Syntax: bool

Default: 0

local.service.http.plaintext.convspace
Convert SP to NBSP in text
For more information see plaintextconvspace Option.

Syntax: bool

Default: 1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.service.http.plaintext.tabsize
Set the tabsize for text message display in webmail
For more information see plaintexttabsize Option.

Syntax: int32

Default: 8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.service.http.popbindaddr
IP address bound when doing POP external collection
For more information see popbindaddr Option.

Syntax: non-empty-string

Default setting is computed; see text for details

local.service.http.proxy.admin
DEPRECATED: See proxyadmin
For more information see httpproxyadmin Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.service.http.proxy.admin.*
DEPRECATED: See proxyadmin
For more information see httpadmin Option.

Syntax: non-empty-string

local.service.http.proxy.adminpass
DEPRECATED: See proxyadminpass
For more information see httpproxyadminpass Option.

Syntax: password

This feature is disabled unless this option is set

local.service.http.proxy.adminpass.*
DEPRECATED: See proxyadminpass
For more information see httpadminpass Option.

Syntax: password

local.service.http.proxy.port
DEPRECATED: See proxyimapport
For more information see proxyport Option.

Syntax: uint16

Default: 80

local.service.http.rfc2231compliant
Enable use of RFC 2231 attachment filename encoding
For more information see rfc2231compliant Option.

Syntax: bool

Default: 0

local.service.http.showunreadcounts
Older web mail clients show per-folder unread message count
For more information see showunreadcounts Option.

Syntax: bool

Default: 0

local.service.http.smtpauthpassword
Admin password MSHTTP uses to authenticate to SMTP server
For more information see smtpauthpassword Option.

Syntax: password

This feature is disabled unless this option is set

local.service.http.smtpauthuser
Admin user name MSHTTP uses to authenticate to SMTP server
For more information see smtpauthuser Option.

Syntax: non-empty-string

local.service.http.usesentdate
Whether webmail uses received date or sent date
For more information see usesentdate Option.

Syntax: bool

Default: 0

local.service.http.xmailer
Override the X-Mailer: value with specified string
For more information see xmailer Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.service.icapservice.server_host
Host name of the remote icapservice server
For more information see server_host Option.

Introduced in release: 8.0.1

Syntax: host

Default setting is computed; see text for details

local.service.icapservice.server_port
Port of the remote icapservice server
For more information see server_port Option.

Introduced in release: 8.0.1

Syntax: uint16

Default: 1344

local.service.icapservice.service_name
Set the icapservicename for HTML sanitizing
For more information see service_name Option.

Introduced in release: 8.0.1

Syntax: string

Default: email

local.service.pab.active
PAB host is active
For more information see active Option.

Syntax: int32

Default setting is computed; see text for details

local.service.pab.alwaysusedefaulthost
Always use specified PAB host, overriding host in PAB URIs
For more information see alwaysusedefaulthost Option.

Syntax: bool

Default: 0

local.service.pab.attributelist
Specify extra attributes for PAB entries
For more information see attributelist Option.

Syntax: non-empty-string

Default: pabattrs

local.service.pab.defaulthost
Index of the default PAB host
For more information see defaulthostindex Option.

Syntax: int32

Default: 0

local.service.pab.enabled
Enable or disable Personal Address Book (PAB)
For more information see enable Option.

Syntax: bool

Default: 0

local.service.pab.ldapbasedn
Base DN for PAB searches
For more information see ldapbasedn Option.

Syntax: non-empty-string

Default setting is computed; see text for details

local.service.pab.ldapbinddn
Bind DN for PAB searches
For more information see ldapbinddn Option.

Syntax: non-empty-string

Default setting is computed; see text for details

local.service.pab.ldaphost
Hostname of the PAB Directory Server
For more information see ldaphost Option.

Syntax: non-empty-string

Default setting is computed; see text for details

local.service.pab.ldappasswd
Password for the ldapbinddn user, used for PAB searches
For more information see ldappasswd Option.

Syntax: password

Default setting is computed; see text for details

local.service.pab.ldapport
Port number of the PAB Directory Server
For more information see ldapport Option.

Syntax: uint16

Default setting is computed; see text for details

local.service.pab.ldapusessl
Use SSL to connect to the PAB Directory Server
For more information see ldapusessl Option.

Syntax: bool

Default: 0

local.service.pab.maxnumberofentries
Maximum number of entries a single PAB can store
For more information see maxnumberofentries Option.

Syntax: uint32

Default: 500

local.service.pab.migrate415
Enable PAB migration
For more information see migrate415 Option.

Syntax: bool

Default: 0

local.service.pab.numberofhosts
Number of PAB servers
For more information see numberofhosts Option.

Syntax: uint32

Default: 1

local.service.proxy.admin
Default store admin login name
For more information see proxyadmin Option.

Syntax: non-empty-string

Default: admin

local.service.proxy.admin.*
Host-specific store admin login name
For more information see imapadmin Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.service.proxy.adminpass
Default store admin password
For more information see proxyadminpass Option.

Syntax: password

This feature is disabled unless this option is set

local.service.proxy.adminpass.*
Host-specific store admin password
For more information see imapadminpass Option.

Syntax: password

local.service.proxy.imapport
IMAP port for connections to backend store servers
For more information see proxyimapport Option.

Syntax: uint16

Default: 143

local.service.proxy.imapport.*
Override usual IMAP port number for some backend mail store
For more information see imapport Option.

Syntax: uint16

This feature is disabled unless this option is set

local.service.proxy.imapssl
Enable SSL access to backend store servers
For more information see proxyimapssl Option.

Syntax: bool

Default setting is computed; see text for details

local.service.proxy.serverlist
Message Store servers from which to list shared folders
For more information see proxyserverlist Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.service.proxy.trustmailhost
Proxy commands to user's mailHost, if not on proxyserverlist
For more information see proxytrustmailhost Option.

Introduced in release: 7 Update 4

Syntax: bool

Default: 0

local.smsgateway.enable
Enable the SMS service on start-msg startup
For more information see enable Option.

Syntax: bool

Default: 0

local.smsgateway.foreground
Run the SMS Gateway Server in foreground with debugging
For more information see foreground Option.

Syntax: int32

Default: 0

local.snmp.cachettl (seconds)
Time (s) subagent reports cached monitoring data
For more information see cachettl Option.

Syntax: int32

Default: 30

local.snmp.contextname
SNMPv3 context name to register instance's MIBs under
For more information see contextname Option.

Syntax: non-empty-string

Default setting is computed; see text for details

local.snmp.directoryscan
Scan channel queues for .HELD file & update oldest file info
For more information see directoryscan Option.

Syntax: bool

Default: 1

local.snmp.enable
Enable the SNMP subagent on start-msg startup
For more information see enable Option.

Syntax: bool

Default: 0

local.snmp.enablecontextname
Register this instance's MIBs under an SNMPv3 context name
For more information see enablecontextname Option.

Syntax: bool

Default: 0

local.snmp.listenaddr
IPv4 address on which to listen as SNMP master agent
For more information see listenaddr Option.

Syntax: interface-address

Default: INADDR_ANY

local.snmp.port
When running as SNMP master agent, the UDP port to listen on
For more information see port Option.

Syntax: uint16

Default: 161

local.snmp.registerindices
applIndex, assocIndex, & mtaGroupIndex as visible variables
For more information see registerindices Option.

Syntax: bool

Default: 0

local.snmp.servertimeout (seconds)
Timeout (seconds) SNMP subagent waits when probing a server
For more information see servertimeout Option.

Syntax: int32

Default: 5

local.snmp.standalone
Run as a standalone SNMP agent independent of snmpd
For more information see standalone Option.

Syntax: bool

Default: 0

local.softtokendir
ims_svc_* utilities set SOFTTODEN_DIR environment variable
For more information see softtokendir Option.

Introduced in release: 7 Update 4 patch 26

Syntax: dirpath

local.ssladjustciphersuites

The ssladjustciphersuites option allows adjusting which SSL cipher suites are enabled or disabled. (This option is available under base, mmp, imapproxy, popproxy, and vdomain.) SSL cipher suites control the level of protection required between SSL client and server. Different cipher suites have different properties and use different cryptographic algorithms. At any time a specific crytographic algorithm might be weakened or compromised by new research in cryptography. The ability to change the default cipher suites allows the software to adapt as security technology changes. In addition as CPUs get faster, the key size necessary to provide several years of comfortable protection increases, even if the algorithm is considered state-of-the-art.

The default set of SSL cipher suites used will change over time as more secure ones are introduced and weaker ones are deprecated. It is expected most deployments will be happy with the default set of cipher suites and it is generally not a good idea to adjust the available cipher suites without reason. However, here are some scenarios where it may be helpful to adjust cipher suites:

A site with specific security policies may wish to provide a fixed list of cipher suites to use that is set by site policy rather than simply using state-of-the-art suites provided by the NSS library. Such a site would typically configure this setting to '-ALL,...' where '...' contains the cipher suite names. A site which is experimenting cipher suites that require installation of special server certificate types, for example the DSS cipher suites. Such a site would enable these additional suites once installation was complete. If a site is forced to continue supporting a particularly old client that only supports old cipher suites, they can be explicitly enabled (for example '+RC4' enables the RC4 cipher suites). A site that chooses to disable an older cipher or hash function pro-actively despite potential interoperability issues may choose to do so. For example, to disable all ciphers using the '3DES' or 'SHA1' algorithms, simply set '-3DES,-SHA1'. Be aware that this sort of pro-active action may generate support calls from end users running older mail clients. In the event the cryptographic research community discovers a vulnerability in one or more of the ciphers enabled by default, this provides a mechanism to immediately disable those ciphers. For example, to disable all ciphers using the '3DES' algorithm, simply set '-3DES'.

As of NSS 3.28 (2017), the following cipher suites are enabled by default in the NSS library: TLS_AES_128_GCM_SHA256, TLS_CHACHA20_POLY1305_SHA256, TLS_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_3DES_EDE_CBC_SHA.

The complete list of cipher suites present in NSS 3.28 (2017) follows: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_DES_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_DES_CBC_SHA, SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5, SSL_RSA_EXPORT_WITH_RC4_40_MD5, SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_FIPS_WITH_DES_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_DES_CBC_SHA, SSL_RSA_WITH_NULL_MD5, SSL_RSA_WITH_NULL_SHA, SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA, TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_RC4_128_SHA, TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_NULL_SHA, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_NULL_SHA, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_NULL_SHA, TLS_ECDH_ECDSA_WITH_RC4_128_SHA, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_NULL_SHA, TLS_ECDH_RSA_WITH_RC4_128_SHA, TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA, TLS_RSA_EXPORT1024_WITH_RC4_56_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_NULL_SHA256, TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA, TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA, TLS_DHE_DSS_WITH_RC4_128_SHA, TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA, TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA, TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_RC4_128_SHA, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_CAMELLIA_128_CBC_SHA, TLS_RSA_WITH_CAMELLIA_256_CBC_SHA, TLS_RSA_WITH_RC4_128_MD5, TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_SEED_CBC_SHA.

TLS 1.3 (NSS 3.39+) has its own cipher suites separate from previous TLS versions. These include: TLS_AES_128_GCM_SHA256, TLS_CHACHA20_POLY1305_SHA256, TLS_AES_256_GCM_SHA384.

Always keep in mind that adjusting the available ciphersuites can impact multiple protocols; NSS is tightly integrated into Messaging Server, as the following diagram illustrates:

Syntax: non-empty-string

local.sslcompress
Enable support for SSL/TLS Compression option
For more information see sslcompress Option.

Introduced in release: 7.0.5

Deprecated in release: 7.0.5.31

Syntax: bool

Default: 0

local.sslconnlimit
Apply connection limits & DNSRBL before SSL
For more information see sslconnlimit Option.

Introduced in release: 8.0.2.1

Syntax: bool

Default: 0

local.ssldblegacy
Require SSL/TLS data to be stored in legacy formats
For more information see ssldblegacy Option.

Introduced in release: 7 Update 3 patch 17

Deprecated in release: 8.0

Syntax: bool

Default: 0

local.ssldbpath
Specify the location of certificates and key files
For more information see ssldbpath Option.

Syntax: absdirpath

Default setting is computed; see text for details

local.ssldbprefix
Specify the prefixes of the certificate and key files
For more information see ssldbprefix Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.sslpkix

The sslpkix base option enables use of PKIX verification for SSL/TLS client certificates (RFC 3280). Full PKIX validation can involve network connections to validate certificates via OCSP or check CRLs. We have not tested these scenarios for correct operation when the system is under load and to verify that network timeouts and server shut down operate correctly when such verifications are in progress.

Introduced in release: 7 Update 4

Syntax: bool

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.sslrenegotiate
Allow SSL re-negotiation
For more information see sslrenegotiate Option.

Introduced in release: 7 Update 5 patch 31

Syntax: bool

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

local.sslrequiresafenegotiate
Require safe SSL re-negotiation per RFC 5746
For more information see sslrequiresafenegotiate Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 0

local.sso.*.verifyurl

The verifyurl option specifies a trusted circle SSO (legacy) parameter. It sets the verify URL values for peer SSO applications. The standard form of the value of the verify URL is:

http://[<em>peer_hostname</em>]:[<em>port</em>]/VerifySSO?

This value should be set for the application ID of a peer SSO application whose SSO cookies are to be honored.

Syntax: non-empty-string

local.store.backup.exclude
Mailboxes to exclude from backup
For more information see backupexclude Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.store.backupdir
Directory for backup image of Message Store data
For more information see backupdir Option.

Syntax: absdirpath

This feature is disabled unless this option is set

local.store.cachesynclevel
Synchronization level for Message Store cache file
For more information see cachesynclevel Option.

Syntax: uint32

Default setting is computed; see text for details

local.store.checkdiskusage
Stop message delivery if partition nearly full
For more information see checkdiskusage Option.

Syntax: bool

Default: 1

local.store.checkmailhost
Check that the user's mailHost value matches this server
For more information see checkmailhost Option.

Syntax: bool

Default: 1

local.store.dbnumcaches
Number of mboxlist db caches
For more information see dbnumcaches Option.

Syntax: enumint

Default: 1

local.store.dbsync
Flush cached database info to disk before database closed
For more information see dbsync Option.

Syntax: bool

Default: 0

local.store.deadlock.autodetect
Deadlock resolved by all threads, vs. just one thread
For more information see autodetect Option.

Syntax: bool

Default: 0

local.store.deadlock.checkinterval (milliseconds)
Milliseconds to sleep between deadlock detections
For more information see checkinterval Option.

Updated in release: 7.0.5

Syntax: uint32

Default: 10

local.store.deadlockaggressive
Aggressive deadlock resolution, delaying transaction retries
For more information see deadlockaggressive Option.

Syntax: uint32

Default: 10

local.store.diskusagethreshold
Disk usage threshold for partition monitoring
For more information see diskusagethreshold Option.

Syntax: uint32

Default: 99

local.store.enable
Enable the Message Store
For more information see enable Option.

Syntax: bool

Default: 0

local.store.ensureownerrights
Enable hidden folders
For more information see ensureownerrights Option.

Syntax: bool

Default: 1

local.store.expire.loglevel
Specify a store expire log level
For more information see exploglevel Option.

Syntax: uint32

Default: 0

local.store.expungesynclevel
Sync level for Message Store expunge file
For more information see expungesynclevel Option.

Syntax: uint32

Default setting is computed; see text for details

local.store.finalcheckpoint
Checkpoint transaction log before close of mailbox list db
For more information see finalcheckpoint Option.

Syntax: bool

Default: 0

local.store.indexsynclevel
Synchronization level for Message Store index file
For more information see indexsynclevel Option.

Syntax: uint32

Default setting is computed; see text for details

local.store.listimplicit
Admin sees implicitly shared folders in lists
For more information see listimplicit Option.

Syntax: bool

Default: 0

local.store.logexpungedetails
Enable logging of expunge details
For more information see logexpungedetails Option.

Introduced in release: 5.2 patch 3

Deprecated in release: 8.0.2

Syntax: bool

Default: 0

local.store.maxfolders
Maximum number of folders
For more information see maxfolders Option.

Syntax: int32

Default: 0

local.store.maxlog
Max # of database transaction logs before restart triggered
For more information see maxlog Option.

Updated in release: 7.0.5

Syntax: uint32

Default: 400

local.store.maxmessages
Maximum number of messages per folder
For more information see maxmessages Option.

Syntax: uint32

Default: 16000000

local.store.messagesynclevel
Synchronization level for Message Store message files
For more information see messagesynclevel Option.

Syntax: uint32

Default setting is computed; see text for details

local.store.notifyplugin
Not used in Unified Configuration
For more information see plugins Option.

Updated in release: 7.0.5

Syntax: non-empty-string

Default: libibiff$ms-internal$

local.store.notifyplugin.*.annotatemsg.enable
Whether AnnotateMsg event generates notification
For more information see annotatemsg Option.

Syntax: bool

Default: 0

local.store.notifyplugin.*.changeflag.enable
Whether ChangeFlag event generates notification
For more information see changeflag Option.

Syntax: bool

Default setting is computed; see text for details

local.store.notifyplugin.*.copymsg.enable
Whether IMAP COPY generates Copy events or UpdateMsg
For more information see copymsg Option.

Introduced in release: 7 Update 1

Syntax: bool

Default: 0

local.store.notifyplugin.*.create.enable
Whether Create event generates notification
For more information see create Option.

Introduced in release: 8.0.1

Syntax: bool

Default: 1

local.store.notifyplugin.*.debuglevel
DELETED: Set debug level for notification plugins
For more information see debug Option.

Deleted in release: 8.0

Syntax: int32

Default: 0

local.store.notifyplugin.*.delete.enable
Whether Delete event generates notification
For more information see delete Option.

Introduced in release: 8.0.1

Syntax: bool

Default: 1

local.store.notifyplugin.*.deletemsg.enable
Whether DeleteMsg events generate a notification
For more information see deletemsg Option.

Syntax: bool

local.store.notifyplugin.*.destinationtype
DEPRECATED: Destination type (queue/topic) for notifytarget
For more information see destinationtype Option.

Updated in release: 8.1

Syntax: non-empty-string

Default: topic

local.store.notifyplugin.*.enable
Enable named notifytarget
For more information see enable Option.

Introduced in release: 7 Update 2

Updated in release: 8.0.2

Syntax: bool

Default: 1

local.store.notifyplugin.*.enseventkey
Event key to use for ENS notifications for this notifytarget
For more information see enseventkey Option.

Syntax: non-empty-string

local.store.notifyplugin.*.enshost
IP address/hostname of the ENS server for this notifytarget
For more information see enshost Option.

Updated in release: 7.0.5

Syntax: non-empty-string

local.store.notifyplugin.*.ensport
TCP port number of the ENS server used by this notifytarget
For more information see ensport Option.

Updated in release: 8.0

Syntax: uint16

Default setting is computed; see text for details

local.store.notifyplugin.*.enspwd

The enspwd option under notifytarget, notifytarget:target-name.enspwd, specifies the ENS Broker user password that is used to authenticate to the ENS broker. The default value of the option will be the value of the option ens.secret, if the target-name of the notifytarget is ms-internal or the notifytarget:target-name.enshost is not set or the notifytarget:target-name.enshost is same as the value of the listenaddr Base option (service.listenaddr in legacy configuration) or the notifytarget:target-name.enshost is 127.0.0.1 or the notifytarget:target-name.enshost is ::1.

Introduced in release: 8.0.1

Syntax: password

Default setting is computed; see text for details

local.store.notifyplugin.*.ensuser
ENS username
For more information see ensuser Option.

Introduced in release: 8.0.1

Syntax: non-empty-string

Default: guest

local.store.notifyplugin.*.ensusessl
Whether to connect to the specified ENS server using TLS/SSL
For more information see ensusessl Option.

Introduced in release: 8.0.1

Syntax: bool

Default: 0

local.store.notifyplugin.*.expungemsg.enable
Whether ExpungeMsg event generates notification
For more information see expungemsg Option.

Syntax: bool

Default: 0

local.store.notifyplugin.*.jmqhost
DEPRECATED: Hostname of the JMQ broker for this notifytarget
For more information see jmqhost Option.

Updated in release: 8.1

Syntax: non-empty-string

local.store.notifyplugin.*.jmqport
DEPRECATED: JMQ broker port number for this notifytarget
For more information see jmqport Option.

Updated in release: 8.1

Syntax: uint16

local.store.notifyplugin.*.jmqpwd

The jmqpwd option under notifytarget, notifytarget:target-name.jmqpwd, specifies the Glassfish MQ (formerly called Java MQ or JMQ) user password that is used to authenticate to the Glassfish MQ broker. The default value was removed in the 8.0 release. For security reasons, this should not be set to an easy-to-guess value such as guest. Starting with the Messaging Server 8.1 release, the JMQ notifytargets feature is deprecated. This feature is only supported for customers migrating from ISS to Elasticsearch.

Updated in release: 8.0

Syntax: password

This feature is disabled unless this option is set

local.store.notifyplugin.*.jmqqueue
DEPRECATED: Topic/queue to which JMQ will publish events
For more information see jmqqueue Option.

Updated in release: 8.1

Syntax: non-empty-string

local.store.notifyplugin.*.jmqtopic
DEPRECATED: Topic/queue to which JMQ will publish events
For more information see jmqtopic Option.

Updated in release: 8.1

Syntax: non-empty-string

Default: JES-MS

local.store.notifyplugin.*.jmquser
JMQ username
For more information see jmquser Option.

Syntax: non-empty-string

local.store.notifyplugin.*.ldapdestination
DEPRECATED: LDAP attribute specifying JMQ notify destination
For more information see ldapdestination Option.

Introduced in release: 7 Update 2

Updated in release: 8.1

Syntax: non-empty-string

local.store.notifyplugin.*.loguser.enable
Whether LogUser events generate a notification
For more information see loguser Option.

Syntax: bool

Default setting is computed; see text for details

local.store.notifyplugin.*.maxbodysize (bytes)
Maximum (bytes) of message body included in notification
For more information see maxbodysize Option.

Syntax: uint32

local.store.notifyplugin.*.maxheadersize
Maximum (bytes) of header included in notification
For more information see maxheadersize Option.

Syntax: uint32

local.store.notifyplugin.*.msgflags.enable
Enable the msgflag notification mechanism
For more information see msgflags Option.

Syntax: bool

local.store.notifyplugin.*.msgtypes.enable
Whether to include message type counts in notifications
For more information see msgtypes Option.

Syntax: bool

Default: 0

local.store.notifyplugin.*.newmsg.enable
Whether NewMsg events generate a notification
For more information see newmsg Option.

Syntax: bool

local.store.notifyplugin.*.noneinbox.enable
Whether all folders vs. INBOX only generate notifications
For more information see noninbox Option.

Updated in release: 7.0.5

Syntax: bool

local.store.notifyplugin.*.overquota.enable
Whether OverQuota event generates notification
For more information see overquota Option.

Introduced in release: 7 Update 4 patch 26

Syntax: bool

local.store.notifyplugin.*.persistent
DEPRECATED: Whether persistent JMQ messages are to be used
For more information see persistent Option.

Updated in release: 8.1

Syntax: bool

Default: 0

local.store.notifyplugin.*.priority
DEPRECATED: Priority for JMQ notification messages
For more information see priority Option.

Updated in release: 8.1

Syntax: int32

Default: 4

local.store.notifyplugin.*.purgemsg.enable
Whether PurgeMsg event generates notification
For more information see purgemsg Option.

Syntax: bool

local.store.notifyplugin.*.readmsg.enable
Whether ReadMsg event generates notification
For more information see readmsg Option.

Syntax: bool

local.store.notifyplugin.*.rename.enable
Whether Rename event generates notification
For more information see rename Option.

Introduced in release: 8.0.1

Syntax: bool

Default: 1

local.store.notifyplugin.*.setacl.enable
Whether SetAcl event generates notification
For more information see setacl Option.

Introduced in release: 8.0.1

Syntax: bool

Default: 1

local.store.notifyplugin.*.ttl (milliseconds)
DEPRECATED: The time-to-live (milliseconds) for JMQ messages
For more information see ttl Option.

Updated in release: 8.1

Syntax: uint32

Default: 0

local.store.notifyplugin.*.underquota.enable
Whether UnderQuota event generates notification
For more information see underquota Option.

Introduced in release: 7 Update 4 patch 26

Syntax: bool

local.store.notifyplugin.*.updatemsg.enable
Whether UpdateMsg event generates notification
For more information see updatemsg Option.

Syntax: bool

local.store.notifyplugin.debuglevel

Level of debugging messages for ibiff plugin. DELETED: Use local.store.notifyplugin.*.debuglevel instead.

Deleted in release: 7 Update 4

Syntax: int32

Default: 0

local.store.notifyplugin.ms-internal.ensusessl
Connect to the ms-internal ENS server using TLS/SSL
For more information see ensusessl Option.

Introduced in release: 8.0.1

Syntax: bool

Default setting is computed; see text for details

local.store.overquotastatus
Enable Message Store to set mailUserStatus to overquota
For more information see overquotastatus Option.

Syntax: bool

Default: 0

local.store.perusersynclevel
Synchronization level for Message Store peruser file
For more information see perusersynclevel Option.

Syntax: uint32

Default setting is computed; see text for details

local.store.pin
Names of folders owner can't delete or modify
For more information see pin Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.store.quotaoverdraft
Allow going overquota (then additional messages can bounce)
For more information see quotaoverdraft Option.

Syntax: bool

Default: 0

local.store.relinker.enabled
Enable re-link (single copy on disk) of messages in store
For more information see enable Option.

Syntax: bool

Default: 0

local.store.relinker.maxage
Maximum message age in hours in relinker repository
For more information see maxage Option.

Syntax: int32

Default: 24

local.store.relinker.minsize
Minimum message size in Kbytes to consider relinking
For more information see minsize Option.

Syntax: uint32

Default: 0

local.store.relinker.purgecycle
Duration in hours of an entire stored purge cycle
For more information see purgecycle Option.

Syntax: int32

Default: 24

local.store.rollingdbbackup
Make rolling backups of Message Store database
For more information see rollingdbbackup Option.

Introduced in release: 7.0

Syntax: bool

Default: 1

local.store.seenckpinterval (hours)
Set the peruser db archive interval, in hours
For more information see seenckpinterval Option.

Syntax: uint32

Default: 6

local.store.seenckpstart
Set first time peruser db archive occurs after stored starts
For more information see seenckpstart Option.

Syntax: uint32

Default: 0

local.store.sharedfolders
Enable shared folder listing and namespaces
For more information see sharedfolders Option.

Syntax: bool

Default: 1

local.store.snapshotdirs
Number of Message Store snapshots to store on disk
For more information see snapshotdirs Option.

Syntax: uint16

Default: 3

local.store.snapshotpath
Specify the path for snapshots of the mboxlist directory
For more information see snapshotpath Option.

Syntax: dirpath

Default: dbdata/snapshots

local.store.subscribesynclevel
Synchronization level for Message Store subscribe file
For more information see subscribesynclevel Option.

Syntax: uint32

Default setting is computed; see text for details

local.store.synclevel
Default synchronization for Message Store files
For more information see synclevel Option.

Syntax: int32

Default: -1

local.stressfdwait
Stop accepting new connections if file descriptor shortage
For more information see stressfdwait Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 1

local.supportedlanguages

The supportedlanguages base option specifies the languages supported by server code.

Syntax: non-empty-string

Default: [en,de,fr,es,af,ca,da,nl,fi,gl,ga,is,it,no,pt,sv,eu,sq,cs,hu,pl,ro,hr,sk,sl,et,lv,lt,ru,bg,be,sr,mk,uk,el,tr,ar,he,yi,th,ja,ko,zh-CN,zh-TW]

local.threadholddelay (milliseconds)
Thread hold delay time (milliseconds) for IMAP and POP
For more information see threadholddelay Option.

Syntax: uint32

Default: 75

local.tlsminversion

The tlsminversion base option determines the minimum acceptable version of TLS (the modern version of the SSL protocol). This presently takes a value of TLS1.0, TLS1.1, TLS1.2, and new in Messaging Server 8.1: TLS1.3. This option defaults to TLS1.2 (disabling TLS 1.0 & 1.1 by default). Prior to the 8.1 release, TLS 1.1 was the default and prior to the 8.0.1 release, TLS 1.0 was the default. If this is set to TLS1.2 (the current default), the setting of the tlsv12enable option is ignored. If this is set to TLS1.3, the setting of the tlsv13enable option is ignored.

Introduced in release: 8.0.1

Updated in release: 8.1

Syntax: enumstrcase

local.tlsv12enable
Enable TLS version 1.2
For more information see tlsv12enable Option.

Introduced in release: 7.0.5.31.0

Updated in release: 8.0

Syntax: bool

Default: 1

local.tlsv13enable
Enable TLS version 1.3
For more information see tlsv13enable Option.

Introduced in release: 8.1

Syntax: bool

Default: 1

local.tmpdir
Temporary file directory
For more information see tmpdir Option.

Syntax: absdirpath

Default setting is computed; see text for details

local.ugldapbasedn
Root of the user/group tree
For more information see ugldapbasedn Option.

Syntax: non-empty-string

local.ugldapbindcred
Password for the user/group administrator
For more information see ugldapbindcred Option.

Syntax: password

local.ugldapbinddn
DN of the user/group administrator
For more information see ugldapbinddn Option.

Syntax: non-empty-string

local.ugldaphost
List of LDAP server(s) for user/group lookup
For more information see ugldaphost Option.

Syntax: string

Default setting is computed; see text for details

local.ugldapport
LDAP port for user/group lookup
For more information see ugldapport Option.

Updated in release: 7.0.5

Syntax: uint16

Default: 389

local.ugldapusessl
Use SSL to connect to user/group LDAP server
For more information see ugldapusessl Option.

Syntax: bool

Default: 0

local.watcher.enable
Enable the Watcher service upon start-msg startup
For more information see enable Option.

Syntax: bool

Default: 0

local.watcher.port
port on which the Watcher listens
For more information see port Option.

Syntax: uint16

Default: 49994

local.webmail.cert.enable
MSHTTP verifies certificates against a CRL
For more information see cert_enable Option.

Syntax: bool

Default: 0

local.webmail.cert.port
Port for MSHTTP to use for CRL communication
For more information see cert_port Option.

Syntax: uint16

Default: 55443

local.webmail.da.host
DEPRECATED
For more information see da_host Option.

Syntax: non-empty-string

Default setting is computed; see text for details

local.webmail.da.port
DEPRECATED
For more information see da_port Option.

Syntax: uint16

Default: 8080

local.webmail.sieve.port
Port of the web container for the Mail Filter
For more information see port Option.

Syntax: uint16

This feature is disabled unless this option is set

local.webmail.sieve.sslport
SSL port of the web container for the Mail Filter
For more information see sslport Option.

Syntax: uint16

This feature is disabled unless this option is set

local.webmail.smime.enable
Enable use of S/MIME by Web Client Mail users
For more information see enable Option.

Syntax: bool

Default: 0

local.webmail.sso.cookiedomain
Domain name used for all SSO cookies
For more information see cookiedomain Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.webmail.sso.enable
Enable trusted circle single sign on functions
For more information see sso_enable Option.

Syntax: bool

Default: 0

local.webmail.sso.id
Appliation ID value in SSO cookies
For more information see sso_id Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.webmail.sso.prefix
Prefix value in SSO cookies
For more information see sso_prefix Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.webmail.sso.singlesignoff
Remove SSO cookies matching sso_prefix value
For more information see singlesignoff Option.

Syntax: bool

Default: 1

local.webmail.sso.uwccontexturi
Path in which Communications Express is deployed (if not /)
For more information see uwccontexturi Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.webmail.sso.uwcenabled
Enable Communications Express access to Messenger Express
For more information see uwcenabled Option.

Syntax: int32

Default: 0

local.webmail.sso.uwchome
URL required for Messenger Express to access the home link
For more information see uwchome Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

local.webmail.sso.uwclogouturl
URL Messenger Express uses to invalidate the session
For more information see uwclogouturl Option.

Syntax: url

This feature is disabled unless this option is set

local.webmail.sso.uwcport
Communications Express port
For more information see uwcport Option.

Syntax: uint16

Default: 80

local.webmail.sso.uwcsslport
Communications Express SSL port
For more information see uwcsslport Option.

Syntax: uint16

Default: 443

logfile.*.expirytime (seconds)
Maximum time (seconds) a log file is kept
For more information see expirytime Option.

Syntax: uint32

Default: 604800

logfile.*.filemode
File mode (octal) used when creating log files
For more information see filemode Option.

Introduced in release: 7 Update 4

Updated in release: 8.0

Syntax: uoctal

Default: 0600

logfile.*.flushinterval (seconds)
Time interval (seconds) between logfile buffer flushes
For more information see flushinterval Option.

Syntax: uint32

Default: 60

logfile.*.logdir
Directory path for log files
For more information see logdir Option.

Syntax: dirpath

Default setting is computed; see text for details

logfile.*.loglevel

The loglevel  logfile option specifies the logging level for the whatever component's logfile it is set under. E.g., imap.logfile.loglevel specifies the logging level for the IMAP server's log file.

Valid values for the loglevel option are: nolog, emergency, alert, critical, error, warning, notice, information, or debug. The default is notice.

The loglevel logfile option for the MTA specifies an MTA log level used for the imta log file (primarily used by ims_master and the LMTP server).

Syntax: enumstrcase

Default: notice

logfile.*.logmillisecond

When the logmillisecond logfile option, component.logfile.logmillisecond, is turned on (that is, set to 1), then milliseconds will be shown in nslog log files.

Introduced in release: 8.0

Syntax: bool

Default: 0

logfile.*.maxlogfiles
Maximum number of log files to retain
For more information see maxlogfiles Option.

Syntax: uint32

Default: 10

logfile.*.maxlogfilesize (bytes)
Max size (bytes) for nslog files; triggers rollover
For more information see maxlogfilesize Option.

Updated in release: 7.0.5

Syntax: uint32

Default: 20971520

logfile.*.maxlogsize (bytes)
Max total size (bytes) for nslog files for a service
For more information see maxlogsize Option.

Updated in release: 7.0.5

Syntax: uint64

Default: 209715200

logfile.*.rollovertime (seconds)
Max time (s) triggering rollover for nslog file
For more information see rollovertime Option.

Syntax: uint32

Default: 86400

logfile.*.syslogfacility
Direct logging to specified syslog service
For more information see syslogfacility Option.

Syntax: non-empty-string

Default: none

metermaid.config.async
MeterMaid use of asynchronous vs. linear thread scheduling
For more information see async Option.

Introduced in release: 7.0.5

Syntax: uint32

Default: 1

metermaid.config.backlog
# of connections permitted in MeterMaid's TCP listen queue
For more information see backlog Option.

Updated in release: 7.0.5

Syntax: uint32

Default: 5

metermaid.config.listenaddr
IPv4 address on which MeterMaid should listen
For more information see listenaddr Option.

Syntax: interface-address

Default: INADDR_ANY

metermaid.config.maxthreads
Maximum number of MeterMaid work threads
For more information see maxthreads Option.

Syntax: uint32

Default: 10

metermaid.config.port

The port MeterMaid option specifies the TCP port number on which MeterMaid listens for connections. The default is 63837.

Syntax: uint16

Default: 63837

metermaid.config.secret

The secret MeterMaid option specifies the secret used to authenticate MeterMaid clients with the server.

Syntax: password

metermaid.config.serverhost
Host on which the MeterMaid server runs
For more information see server_host Option.

Syntax: host

metermaid.mtaclient.connectfrequency (seconds)
Reconnect delay after failed connection to metermaid
For more information see connectfrequency Option.

Syntax: uint32

metermaid.mtaclient.connectwait (seconds)
Timeout (seconds) for connecting to MeterMaid server
For more information see connecttimeout Option.

Syntax: uint32

Default: 5

metermaid.mtaclient.debug

The debug  MeterMaid Client option enables debug output from the MTA client into SMTP log files.

Syntax: int32

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

metermaid.mtaclient.maxconns
Concurrent connections to MeterMaid per client process
For more information see max_conns Option.

Updated in release: 8.0

Syntax: uint32

Default: 5

metermaid.mtaclient.readwait (seconds)
Timeout (seconds) for client communications with MeterMaid
For more information see timeout Option.

Syntax: uint32

Default: 10

metermaid.mtaclient.remote_server.*.maxconns
Concurrent MeterMaid client connections to a remote_server
For more information see max_conns Option.

Introduced in release: 8.0

Updated in release: 8.0

Syntax: uint32

Default: 3

metermaid.mtaclient.remote_server.*.serverhost
Host on which a particular nicknamed MeterMaid server runs
For more information see server_host Option.

Introduced in release: 8.0

Syntax: host

metermaid.mtaclient.remote_server.*.serverport

The server_port MeterMaid client remote_server option specifies the TCP port to which the metermaid_client should connect for this remote_server.

Introduced in release: 8.0

Syntax: uint16

Default: 63837

metermaid.mtaclient.remote_server.*.sslusessl
Whether to connect to the specified server using SSL
For more information see sslusessl Option.

Introduced in release: 8.0

Updated in release: 8.0

Syntax: bool

Default setting is computed; see text for details

metermaid.mtaclient.remote_table.*.server_nickname
Nickname for remote_server entry
For more information see server_nickname Option.

Introduced in release: 8.0

Syntax: printable-ascii-string

metermaid.mtaclient.serverport
TCP port of the MeterMaid server
For more information see server_port Option.

Introduced in release: 7.0.5

Syntax: uint16

Default setting is computed; see text for details

metermaid.mtaclient.sslusessl
Whether to connect to the MeterMaid server using SSL
For more information see sslusessl Option.

Introduced in release: 8.0

Updated in release: 8.0

Syntax: bool

Default: 0

metermaid.table.*.block_time
Initial blocking period for greylisting purposes
For more information see block_time Option.

Introduced in release: 7 Update 4

Syntax: iso8601duration-or-int

Default: pt5m

metermaid.table.*.data_type
Type of data in table: either ipv4, or string
For more information see data_type Option.

Syntax: enumstrcase

Default: string

metermaid.table.*.inactivity_time
Period to consider as "known" for greylisting purposes
For more information see inactivity_time Option.

Introduced in release: 7 Update 4

Syntax: iso8601duration-or-int

Default: p7d

metermaid.table.*.max_entries
Maximum number of entries to maintain in the table
For more information see max_entries Option.

Syntax: uint32

Default: 1000

metermaid.table.*.options
List of options for the table: penalize, or nocase
For more information see table_options Option.

Syntax: printable-ascii-string-list

This feature is disabled unless this option is set

metermaid.table.*.quota
Number of connections to permit per quota_time
For more information see quota Option.

Syntax: uint32

Default: 100

metermaid.table.*.quota_time
Number of seconds to allow quota
For more information see quota_time Option.

Syntax: iso8601duration-or-int

Default: PT1M

metermaid.table.*.resubmit_time
Period to permit resubmission for greylisting purposes
For more information see resubmit_time Option.

Introduced in release: 7 Update 4

Syntax: iso8601duration-or-int

Default: pt4h

metermaid.table.*.storage
Method of data storage for table: hash, or splay
For more information see storage Option.

Syntax: enumstrcase

Default: hash

metermaid.table.*.type
Specify type of table: either throttle, or simple
For more information see table_type Option.

Syntax: enumstrcase

Default: throttle

metermaid.table.*.value_type
Specify type of data for values: either integer, or string
For more information see value_type Option.

Introduced in release: 7 Update 1

Syntax: enumstrcase

Default: integer

pipeprograms.*.path
Location of the program the pipe channel uses to deliver
For more information see command Option.

Syntax: filepath

This feature is disabled unless this option is set

pipeprograms.*.pipeparams
Pipe channel program delivery arguments
For more information see params Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

pipeprograms.*.pipeperm
Pipe channel program delivery permissions
For more information see perms Option.

Syntax: non-empty-string

Default: Postmaster

pmxbl.connectfrequency (seconds)
RESTRICTED: Frequency (s) to attempt a conn to PureMessage
For more information see connectfrequency Option.

Syntax: uint32

Default: 15

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

pmxbl.connectwait (seconds)
RESTRICTED: Timeout (s) to connect to PureMessage IP Blocker
For more information see connecttimeout Option.

Syntax: uint32

Default: 5

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

pmxbl.maxconns
RESTRICTED: Per-process max # of conns to PureMessage
For more information see max_conns Option.

Updated in release: 8.0

Syntax: uint32

Default: 3

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

pmxbl.port
RESTRICTED: Port on which PureMessage IP Blocker listens
For more information see port Option.

Syntax: uint16

Default: 4466

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

pmxbl.readwait (seconds)
RESTRICTED: Timeout (s) communicating PureMessage IP Blocker
For more information see timeout Option.

Syntax: uint32

Default: 10

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

pmxbl.serverhost
RESTRICTED: Host where PureMessage IP Blocker service runs
For more information see server_host Option.

Syntax: host

Default: localhost

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

redis.hostlist
List of Redis hosts
For more information see hostlist Option.

Introduced in release: 8.0.2.3

Syntax: host-list

This feature is disabled unless this option is set

redis.servicename
Redis service name
For more information see servicename Option.

Introduced in release: 8.1.0.1

Syntax: name

This feature is disabled unless this option is set

sasl.default.authenticationldapattributes

The authenticationldapattributes  Auth option specifies a space-separated list of additional LDAP user attributes to look up and pass to the third-party authentication server. This option is also available at imapproxy, popproxy, and vdomain level (to override, for the respective lookups, the general Auth option). To enable support for a third-party authentication server, set the authenticationserver option. For developer instructions and SDK see the directory msg_svr_base/examples/tpauth.

Introduced in release: 7 Update 4 patch 22

Syntax: ldapattr-list

This feature is disabled unless this option is set

sasl.default.authenticationserver

The authenticationserver  Auth option specifies the hostname and port for a third-party authentication service to use for authentication. This option is also available at imapproxy and popproxy level (to override, for the respective server, the general Auth option). The recommended value is :56 when a third-party authentication service is available on the loopback interface of the server process performing authentication. For developer instructions and SDK see the directory msg_svr_base/examples/tpauth.

When not set, the servers will authenticate via LDAP.

Introduced in release: 7.0.5

Syntax: string

sasl.default.auto_transition
Password storage format from plaintext to APOP or CRAM-MD5
For more information see auto_transition Option.

Syntax: bool

Default: 0

sasl.default.broken_client_login_charset
Workaround broken client use of ISO-8859-1 user/password
For more information see broken_client_login_charset Option.

Introduced in release: 7 Update 4 patch 27

Syntax: enumstrcase

Default: UTF-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

sasl.default.ldap.domainmap
When authenticating, look up domains prior to locating users
For more information see usedomainmap Option.

Syntax: bool

Default: 1

sasl.default.ldap.has_plain_passwords
LDAP stores plaintext passwords, enables APOP and CRAM-MD5
For more information see has_plain_passwords Option.

Syntax: bool

Default: 0

sasl.default.ldap.searchfilter
Default authentication and identity search filter for users
For more information see searchfilter Option.

Syntax: non-empty-string

Default: (&(uid=%U)(objectclass=inetmailuser))

sasl.default.ldap.searchfordomain
Control whether directory has users located by domain
For more information see searchfordomain Option.

Syntax: bool

Default: 1

sasl.default.requireauthenticationserver

The requireauthenticationserver option is available under auth and under imapproxy and popproxy.

When an authentication server is configured using the authenticationserver option, and requireauthenticationserver is 1 (the default), that server must be running and responding to requests or authentication will not succeed. If requireauthenticationserver is set to 0, then built-in authentication mechanisms will be permitted even if the authentication server ceases to respond to requests.

Introduced in release: 7 Update 4 patch 22

Syntax: bool

sentinel.hostlist
List of Redis Sentinel hosts
For more information see hostlist Option.

Introduced in release: 8.1.0.1

Syntax: host-list

This feature is disabled unless this option is set

service.authcachesize
Maximum number of users/entries in the authentication cache
For more information see authcachesize Option.

Syntax: uint32

Default: 10000

service.authcachettl (seconds)
Length of time an authentication cache entry is valid
For more information see authcachettl Option.

Syntax: uint32

Default: 900

service.dcroot
Root of the DC tree in the Directory Server
For more information see dcroot Option.

Syntax: non-empty-string

service.defaultdomain
Specify a default domain to assume on "bare" usernames
For more information see defaultdomain Option.

Syntax: host

service.dnsresolveclient
Force DNS reverse lookup on client connections
For more information see dnsresolveclient Option.

Syntax: bool

Default: 0

service.ens.domainallowed
TCP wrapper allow filter for ENS
For more information see domainallowed Option.

Introduced in release: 7 Update 4

Syntax: non-empty-string

service.ens.domainnotallowed
TCP wrapper deny filter for ENS
For more information see domainnotallowed Option.

Introduced in release: 7 Update 4

Syntax: non-empty-string

service.eval_ldapd.domainallowed
TCP wrapper Allow filter for eval_ldapd
For more information see domainallowed Option.

Introduced in release: 7.0.5

Syntax: non-empty-string

service.eval_ldapd.domainnotallowed
TCP wrapper Deny filter for eval_ldapd
For more information see domainnotallowed Option.

Introduced in release: 7.0.5

Syntax: non-empty-string

service.feedback.notspam
Email address to which to send reports of not-spam mail
For more information see notspam Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.feedback.spam
Email address to which to send reports of spam mail
For more information see spam Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.http.allowanonymouslogin
Enable SASL ANONYMOUS mechanism for use by MSHTTP
For more information see allowanonymouslogin Option.

Syntax: bool

Default: 0

service.http.connlimits
Max # of connections permitted from IP realm to MSHTTP
For more information see connlimits Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.http.domainallowed
Access filters specify which domains/IPs allowed to MSHTTP
For more information see domainallowed Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.http.domainnotallowed
Access filters specify which domains/IPs not allowed
For more information see domainnotallowed Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.http.enable
Enable MSHTTP on start-msg startup
For more information see enable Option.

Syntax: bool

Default: 1

service.http.enablesslport
Control whether HTTP+SSL service is started
For more information see enablesslport Option.

Syntax: bool

Default: 0

service.http.extrauserldapattrs
Names of extra LDAP attributes to return to client
For more information see extrauserldapattrs Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.http.fullfromheader
From: header address includes cn value as phrase
For more information see fullfromheader Option.

Syntax: bool

Default: 1

service.http.httpcharset.af

Default http character set for Afrikaans.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.ar

Default http character set for Arabic.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.be

Default http character set for Byelorussian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.bg

Default http character set for Bulgarian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.ca

Default http character set for Catalan.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.cs

Default http character set for Czech.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.da

Default http character set for Danish.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.de

Default http character set for German.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.el

Default http character set for Greek.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.en

Default http character set for English.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.es

Default http character set for Spanish.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.et

Default http character set for Estonian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.eu

Default http character set for Basque.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.fi

Default http character set for Finnish.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.fr

Default http character set for French.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.ga

Default http character set for Irish.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.gl

Default http character set for Galician.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.he

Default http character set for Hebrew.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.hr

Default http character set for Croatian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.hu

Default http character set for Hungarian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.is

Default http character set for Icelandic.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.it

Default http character set for Italian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.ja

Default http character set for Japanese.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.ko

Default http character set for Korean.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.lt

Default http character set for Lithuanian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.lv

Default http character set for Latvian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.mk

Default http character set for Macedonian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.nl

Default http character set for Dutch.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.no

Default http character set for Norwegian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.pl

Default http character set for Polish.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.pt

Default http character set for Portuguese.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.ro

Default http character set for Romanian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.ru

Default http character set for Russian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.sk

Default http character set for Slovak.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.sl

Default http character set for Slovenian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.sq

Default http character set for Albanian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.sr

Default http character set for Serbian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.sv

Default http character set for Swedish.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.th

Default http character set for Thai.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.tr

Default http character set for Turkish.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.uk

Default http character set for Ukrainian.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.yi

Default http character set for Yiddish.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.zh-cn

Default http character set for Simplified Chinese.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.httpcharset.zh-tw

Default http character set for Traditional Chinese.

Syntax: non-empty-string

Default: utf-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.idletimeout (minutes)
Maximum idle time (minutes) for low-level HTTP connection
For more information see idletimeout Option.

Syntax: uint32

Default: 3

service.http.ipsecurity
Restrict session access to IP address used during login
For more information see ipsecurity Option.

Syntax: bool

Default: 1

service.http.logunauthsession
Enable log messages from unauthenticated MSHTTP sessions
For more information see logunauthsession Option.

Introduced in release: 8.0

Syntax: bool

service.http.mailcharset.af

Default mail character set for Afrikaans.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.ar

Default mail character set for Arabic.

Syntax: non-empty-string

Default: iso-8859-6

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.be

Default mail character set for Byelorussian.

Syntax: non-empty-string

Default: iso-8859-5

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.bg

Default mail character set for Bulgarian.

Syntax: non-empty-string

Default: iso-8859-5

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.ca

Default mail character set for Catalan.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.cs

Default mail character set for Czech.

Syntax: non-empty-string

Default: iso-8859-2

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.da

Default mail character set for Danish.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.de

Default mail character set for German.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.el

Default mail character set for Greek.

Syntax: non-empty-string

Default: iso-8859-7

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.en

Default mail character set for English.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.es

Default mail character set for Spanish.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.et

Default mail character set for Estonian.

Syntax: non-empty-string

Default: iso-8859-4

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.eu

Default mail character set for Basque.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.fi

Default mail character set for Finnish.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.fr

Default mail character set for French.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.ga

Default mail character set for Irish.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.gl

Default mail character set for Galician.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.he

Default mail character set for Hebrew.

Syntax: non-empty-string

Default: iso-8859-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.hr

Default mail character set for Croatian.

Syntax: non-empty-string

Default: iso-8859-2

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.hu

Default mail character set for Hungarian.

Syntax: non-empty-string

Default: iso-8859-2

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.is

Default mail character set for Icelandic.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.it

Default mail character set for Italian.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.ja

Default mail character set for Japanese.

Syntax: non-empty-string

Default: iso-2022-jp

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.ko

Default mail character set for Korean.

Syntax: non-empty-string

Default: euc-kr

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.lt

Default mail character set for Lithuanian.

Syntax: non-empty-string

Default: iso-8859-4

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.lv

Default mail character set for Latvian.

Syntax: non-empty-string

Default: iso-8859-4

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.mk

Default mail character set for Macedonian.

Syntax: non-empty-string

Default: iso-8859-5

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.nl

Default mail character set for Dutch.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.no

Default mail character set for Norwegian.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.pl

Default mail character set for Polish.

Syntax: non-empty-string

Default: iso-8859-2

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.pt

Default mail character set for Portuguese.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.ro

Default mail character set for Romanian.

Syntax: non-empty-string

Default: iso-8859-2

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.ru

Default mail character set for Russian.

Syntax: non-empty-string

Default: iso-8859-5

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.sk

Default mail character set for Slovak.

Syntax: non-empty-string

Default: iso-8859-2

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.sl

Default mail character set for Slovenian.

Syntax: non-empty-string

Default: iso-8859-2

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.sq

Default mail character set for Albanian.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.sr

Default mail character set for Serbian.

Syntax: non-empty-string

Default: iso-8859-5

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.sv

Default mail character set for Swedish.

Syntax: non-empty-string

Default: iso-8859-1

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.th

Default mail character set for Thai.

Syntax: non-empty-string

Default: tis-620

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.tr

Default mail character set for Turkish.

Syntax: non-empty-string

Default: iso-8859-9

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.uk

Default mail character set for Ukrainian.

Syntax: non-empty-string

Default: iso-8859-5

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.yi

Default mail character set for Yiddish.

Syntax: non-empty-string

Default: iso-8859-8

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.zh-cn

Default mail character set for Simplified Chinese.

Syntax: non-empty-string

Default: gb2312

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.mailcharset.zh-tw

Default mail character set for Traditional Chinese.

Syntax: non-empty-string

Default: big5

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.http.maxmessagesize (bytes)
Max message size (bytes) MSHTTP allows client to send
For more information see maxmessagesize Option.

Syntax: uint32

Default: 5242880

service.http.maxpostsize (bytes)

The maxpostsize MSHTTP option specifies the maximum HTTP post content length, in bytes. If not specified, the default is max(5*1024*1024, http.maxmessagesize). In legacy configuration this would be max(5*1024*1024, service.http.maxmessagesize).

Syntax: uint32

Default setting is computed; see text for details

service.http.maxsessions
Maximum number of sessions for the MSHTTP server process
For more information see maxsessions Option.

Syntax: uint32

Default: 6000

service.http.maxthreads
Maximum number of threads for MSHTTP server process
For more information see maxthreads Option.

Syntax: uint32

Default: 250

service.http.numprocesses
Number of MSHTTP server processes
For more information see numprocesses Option.

Syntax: uint32

Default: 1

service.http.plaintextmincipher
Plaintext passwords require SSL/TLS protection
For more information see plaintextmincipher Option.

Syntax: int32

Default: 0

service.http.port
Messenger Express HTTP port
For more information see port Option.

Syntax: uint16

Default: 8990

service.http.resourcetimeout (seconds)
Time (s) after which MSHTTP flushes cached session data
For more information see resourcetimeout Option.

Syntax: uint32

Default: 900

service.http.sessiontimeout (seconds)
Webmail client session timeout (s)
For more information see sessiontimeout Option.

Syntax: uint32

Default: 7200

service.http.smtphost
List of hosts offering SMTP/SMTP_SUBMIT service to MSHTTP
For more information see smtphost Option.

Syntax: host-list

Default setting is computed; see text for details

service.http.smtpport
Port on which SMTP/SMTP_SUBMIT service is offered to MSHTTP
For more information see smtpport Option.

Syntax: uint16

Default: 25

service.http.smtptls
Whether MSHTTP uses TLS for its SMTP connections
For more information see smtptls Option.

Syntax: bool

Default: 0

service.http.sourceurl
URL of webmail server
For more information see sourceurl Option.

Syntax: url

This feature is disabled unless this option is set

service.http.spooldir
Attachment spool directory for client outgoing mail
For more information see spooldir Option.

Syntax: absdirpath

Default setting is computed; see text for details

service.http.sslcachesize
Number of SSL sessions cached by the MSHTTP server
For more information see sslcachesize Option.

Updated in release: 8.0

Syntax: uint32

Default setting is computed; see text for details

service.http.sslport
Port on which the HTTP+SSL server listens
For more information see sslport Option.

Updated in release: 8.0

Syntax: uint16

Default: 8991

service.http.sslsourceurl
URL of webmail server when SSL is enabled
For more information see sslsourceurl Option.

Syntax: url

service.http.sslusessl

Starting with the 8.0 release, this option has no effect on the mshttpd server.

As regards listening at a separate sslport, note that for the 7.0.5 release, the sslusessl option must be explicitly set to 1 (even though the default was 1) as well as setting http.enablesslport to enable SSL connections on a separate sslport.

Updated in release: 8.0

Syntax: bool

Default: 1

service.imap.allowanonymouslogin
Enable the SASL ANONYMOUS mechanism for use by IMAP
For more information see allowanonymouslogin Option.

Syntax: bool

Default: 0

service.imap.banner
Template for the IMAP protocol welcome banner
For more information see banner Option.

Syntax: non-empty-string

Default: %h %p service (%P %V)

service.imap.capability.acl
Enable the ACL IMAP extension
For more information see capability_acl Option.

Syntax: bool

Default: 1

service.imap.capability.annotate
Enable the ANNOTATE-EXPERIMENT-1 IMAP extension
For more information see capability_annotate Option.

Syntax: bool

Default: 1

service.imap.capability.binary
Enable the BINARY IMAP extension
For more information see capability_binary Option.

Syntax: bool

Default: 1

service.imap.capability.catenate
Enable the CATENATE IMAP extension
For more information see capability_catenate Option.

Syntax: bool

Default: 1

service.imap.capability.children
Enable the CHILDREN IMAP extension
For more information see capability_children Option.

Syntax: bool

Default: 1

service.imap.capability.condstore
Enable the CONDSTORE IMAP extension
For more information see capability_condstore Option.

Syntax: bool

Default: 1

service.imap.capability.context_search
Enable the CONTEXT=SEARCH IMAP extension
For more information see capability_context_search Option.

Syntax: bool

Default: 1

service.imap.capability.context_sort
Enable the CONTEXT=SORT IMAP extension
For more information see capability_context_sort Option.

Syntax: bool

Default: 1

service.imap.capability.create_special_use
Enable the CREATE-SPECIAL-USE IMAP extension
For more information see capability_create_special_use Option.

Introduced in release: 8.0

Syntax: bool

Default: 1

service.imap.capability.enable
Enable the ENABLE IMAP extension
For more information see capability_enable Option.

Syntax: bool

Default: 1

service.imap.capability.esearch
Enable the ESEARCH IMAP extension
For more information see capability_esearch Option.

Syntax: bool

Default: 1

service.imap.capability.esort
Enable the ESORT IMAP extension
For more information see capability_esort Option.

Syntax: bool

Default: 1

service.imap.capability.id
Enable the IMAP ID extension
For more information see capability_id Option.

Introduced in release: 7 Update 4

Syntax: bool

Default: 1

service.imap.capability.idle
Enable the IMAP IDLE extension
For more information see capability_idle Option.

Syntax: bool

Default: 1

service.imap.capability.imap4
Enable the IMAP4 capability
For more information see capability_imap4 Option.

Syntax: bool

Default setting is computed; see text for details

service.imap.capability.imap4rev1
Enable the IMAP4rev1 capability
For more information see capability_imap4rev1 Option.

Syntax: bool

Default: 1

service.imap.capability.language
Enable the LANGUAGE IMAP extension
For more information see capability_language Option.

Syntax: bool

Default: 1

service.imap.capability.list_status
Enable the LIST-STATUS IMAP extension
For more information see capability_list_status Option.

Introduced in release: 8.0

Syntax: bool

Default: 1

service.imap.capability.literal_plus
Enable the LITERAL+ IMAP extension
For more information see capability_literal Option.

Syntax: bool

Default: 1

service.imap.capability.login_referrals
Enable LOGIN-REFERRALS IMAP extension
For more information see capability_login_referrals Option.

Introduced in release: 8.0.1

Syntax: bool

Default: 1

service.imap.capability.metadata
Enable the METADATA IMAP extension
For more information see capability_metadata Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 1

service.imap.capability.multisearch

For 7.0.5.31.0 and later, the capability_multisearch IMAP option is disabled by default and if enabled will enable the experimental XMSEARCH IMAP extension that is a subset of the functionality described in RFC 6237 (IMAP4 Multimailbox SEARCH Extension). The ESEARCH command will be disabled unless this is set to 1.

For the 8.0 release and later, this is enabled by default and controls visibility of the MULTISEARCH capability as described in RFC 7377 (IMAP4 Multimailbox SEARCH Extension).

See also the capability_esearch and maxsearchmailboxes IMAP options.

Introduced in release: 7.0.5.31.0

Updated in release: 8.0

Syntax: bool

Default: 1

service.imap.capability.namespace
Enable the NAMESPACE IMAP extension
For more information see capability_namespace Option.

Syntax: bool

Default: 1

service.imap.capability.notify
Enable the NOTIFY IMAP extension
For more information see capability_notify Option.

Syntax: bool

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.imap.capability.qresync
Enable the QRESYNC IMAP extension
For more information see capability_qresync Option.

Syntax: bool

Default: 1

service.imap.capability.quota
Enable the QUOTA IMAP extension
For more information see capability_quota Option.

Syntax: bool

Default: 1

service.imap.capability.sasl_ir
Enable the SASL-IR IMAP extension
For more information see capability_sasl_ir Option.

Syntax: bool

Default: 1

service.imap.capability.savedate
Enable the SAVEDATE IMAP extension
For more information see capability_savedate Option.

Introduced in release: 8.1

Syntax: bool

Default: 1

service.imap.capability.searchres
Enable the SEARCHRES INAO extension
For more information see capability_searchres Option.

Syntax: bool

Default: 1

service.imap.capability.sort
Enable the SORT IMAP extension
For more information see capability_sort Option.

Syntax: bool

Default: 1

service.imap.capability.sort_display
Enable the SORT=DISPLAY capability
For more information see capability_sort_display Option.

Introduced in release: 8.0

Syntax: bool

Default: 1

service.imap.capability.special_use
Enable the SPECIAL-USE IMAP extension
For more information see capability_special_use Option.

Introduced in release: 8.0

Syntax: bool

Default: 1

service.imap.capability.starttls
Enable the STARTTLS IMAP extension
For more information see capability_starttls Option.

Syntax: bool

Default: 1

service.imap.capability.status_size
Enable the STATUS=SIZE IMAP extension
For more information see capability_status_size Option.

Introduced in release: 8.1

Syntax: bool

Default: 1

service.imap.capability.thread_references
Enable the THREAD=REFERENCES IMAP extension
For more information see capability_thread_references Option.

Syntax: bool

Default: 1

service.imap.capability.thread_subject
Enable the THREAD=ORDEREDSUBJECT IMAP extension
For more information see capability_thread_subject Option.

Syntax: bool

Default: 1

service.imap.capability.uidplus
Enable the UIDPLUS IMAP extension
For more information see capability_uidplus Option.

Syntax: bool

Default: 1

service.imap.capability.unauthenticate
Enable the UNAUTHENTICATE IMAP extension
For more information see capability_unauthenticate Option.

Introduced in release: 8.1

Syntax: bool

Default: 0

service.imap.capability.unselect
Enable the UNSELECT IMAP extension
For more information see capability_unselect Option.

Syntax: bool

Default: 1

service.imap.capability.url_partial
Enable the URL-PARTIAL IMAP extension
For more information see capability_url_partial Option.

Introduced in release: 8.1

Syntax: bool

Default: 1

service.imap.capability.urlauth
Enable the URLAUTH IMAP extension
For more information see capability_urlauth Option.

Syntax: bool

Default: 1

service.imap.capability.utf8_accept
Enable UTF8=ACCEPT IMAP extension
For more information see capability_utf8_accept Option.

Introduced in release: 8.1

Syntax: bool

Default: 1

service.imap.capability.within
Enable the WITHIN IMAP extension
For more information see capability_within Option.

Syntax: bool

Default: 1

service.imap.capability.x_netscape
Enable the X-NETSCAPE IMAP extension
For more information see capability_x_netscape Option.

Syntax: bool

Default: 0

service.imap.capability.x_orcl_as
Enable the X-ORCL-AS IMAP capability
For more information see capability_x_orcl_as Option.

Introduced in release: 8.0

Syntax: bool

Default: 1

service.imap.capability.x_sun_imap
Enable the X-SUN-IMAP IMAP extension
For more information see capability_x_sun_imap Option.

Syntax: bool

Default: 1

service.imap.capability.x_sun_sort
Enable the X-SUN-SORT IMAP extension
For more information see capability_x_sun_sort Option.

Syntax: bool

Default: 1

service.imap.capability.x_unauthenticate
Advertise X-UNAUTHENTICATE IMAP extension
For more information see capability_x_unauthenticate Option.

Updated in release: 8.0

Syntax: bool

Default: 0

service.imap.capability.xrefresh
Enable the XREFRESH IMAP extension
For more information see capability_xrefresh Option.

Syntax: bool

Default: 1

service.imap.capability.xserverinfo
Enable the XSERVERINFO IMAP extension
For more information see capability_xserverinfo Option.

Syntax: bool

Default: 0

service.imap.capability.xsnippet
Enable the XSNIPPET IMAP extension
For more information see capability_xsnippet Option.

Introduced in release: 8.0.1.2.0

Syntax: bool

Default: 1

service.imap.capability.xum1
Enable the XUM1 IMAP extension
For more information see capability_xum1 Option.

Syntax: bool

Default: 1

service.imap.connlimits
Max # of connections permitted from IP realm to IMAP
For more information see connlimits Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.imap.domainallowed
Access filters specify which domains/IPs allowed to IMAP
For more information see domainallowed Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.imap.domainnotallowed
Access filters specify which domains/IPs not allowed access
For more information see domainnotallowed Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.imap.enable
Enable the IMAP server on start-msg startup
For more information see enable Option.

Syntax: bool

Default: 0

service.imap.enablesslport
Enable IMAP+SSL on a special port
For more information see enablesslport Option.

Syntax: bool

Default: 0

service.imap.extra_capabilities
IMAP server enables specified additional capabilities
For more information see extra_capabilities Option.

Introduced in release: 7.0.5.31.0

Syntax: printable-ascii-string-list

This feature is disabled unless this option is set

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.imap.idletimeout (minutes)
Maximum idle time (minutes) for IMAP connections
For more information see idletimeout Option.

Syntax: uint32

Default: 30

service.imap.indexer.bodytextonly
IMAP consults ISS for searches with BODY or TEXT terms
For more information see bodytextonly Option.

Introduced in release: 7.0.5.29.0

Syntax: bool

Default: 0

service.imap.indexer.connectwait (seconds)
Timeout (seconds) for IMAP server connections to indexer
For more information see connecttimeout Option.

Syntax: uint32

Default: 10

service.imap.indexer.enable
Enable sending IMAP search queries to ISS
For more information see enable Option.

Updated in release: 7.0.5.30

Syntax: bool

Default: 0

service.imap.indexer.hostname
Host on which ISS (Indexing and Search Server) runs
For more information see server_host Option.

Syntax: host

This feature is disabled unless this option is set

service.imap.indexer.port
TCP port on which ISS (Indexing and Search Server) listens
For more information see port Option.

Syntax: uint16

Default: 8070

service.imap.indexer.prefix_search
Header fields for *-prefixed searches
For more information see prefix_search Option.

Introduced in release: 7 Update 4

Syntax: printable-ascii-string-list

This feature is disabled unless this option is set

service.imap.indexer.sslusessl
Whether to use SSL to connect to the Indexer Server
For more information see sslusessl Option.

Introduced in release: 7.0.5.31.0

Updated in release: 8.0

Syntax: bool

Default: 0

service.imap.indexer.substring_search
Header fields for substring, rather than exact, searches
For more information see substring_search Option.

Introduced in release: 7 Update 4

Syntax: printable-ascii-string-list

This feature is disabled unless this option is set

service.imap.indexer.suffix_search
Header fields for *-suffixed searches
For more information see suffix_search Option.

Introduced in release: 7 Update 4

Syntax: printable-ascii-string-list

This feature is disabled unless this option is set

service.imap.indexer.timeout (seconds)
Timeout (seconds) for read/write between IMAP and ISS
For more information see timeout Option.

Syntax: uint32

Default: 30

service.imap.logunauthsession
Enable log messages from unauthenticated IMAP sessions
For more information see logunauthsession Option.

Introduced in release: 8.0

Syntax: bool

service.imap.maxmessagesize (bytes)
Max message size (bytes) IMAP clients may save via APPEND
For more information see maxmessagesize Option.

Introduced in release: 8.0

Updated in release: 8.0.2.1

Syntax: uint32

Default: 4294967295

service.imap.maxsessions
Maximum number of sessions for the IMAP server process
For more information see maxsessions Option.

Syntax: uint32

Default: 4000

service.imap.maxthreads
Maximum number of threads for IMAP server process
For more information see maxthreads Option.

Syntax: uint32

Default: 250

service.imap.numprocesses
Number of IMAP server processes
For more information see numprocesses Option.

Syntax: uint32

Default: 1

service.imap.plaintextmincipher
Plaintext passwords require SSL/TLS protection
For more information see plaintextmincipher Option.

Syntax: int32

Default: 0

service.imap.port
IMAP server port number
For more information see port Option.

Syntax: uint16

Default: 143

service.imap.sslcachesize
Number of SSL sessions cached by the IMAP server
For more information see sslcachesize Option.

Updated in release: 8.0

Syntax: uint32

Default setting is computed; see text for details

service.imap.sslport
Port on which the IMAP+SSL server listens
For more information see sslport Option.

Updated in release: 8.0

Syntax: uint16

Default: 993

service.imap.sslusessl

If a server certificate is installed and the sslusessl IMAP option is not set to 0, then STARTTLS is enabled on the IMAP server (listening at its regular port).

As regards listening at a separate sslport, note that for the 7.0.5 release, the sslusessl option must be explicitly set to 1 (even though the default was 1) as well as setting imap.enablesslport to enable SSL connections on a separate sslport. For the 8.0 release, it is no longer necessary to explicitly set this option in order to enable SSL connections on a separate port.

Updated in release: 8.0

Syntax: bool

Default: 1

service.imap.submituser
Userid when resolving submit IMAP URLs in BURL commands
For more information see submituser Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.imap.withinresolution (minutes)
Update interval (minutes) for YOUNGER or OLDER searches
For more information see withinresolution Option.

Syntax: enumint

Default: 30

service.imapproxy.domainallowed

The domainallowed IMAP Proxy/POP Proxy option (also available under ens, eval_ldapd, http, imap, and pop) specifies access filters specifying which domains and/or IP addresses are allowed access for the selected server.

Introduced in release: 7.0.5

Syntax: non-empty-string

service.imapproxy.domainnotallowed

The domainnotallowed IMAP Proxy/POP Proxy option (also available at other levels) specifies access filters specifying which domains and/or IP addresses are not allowed access for the selected server.

Introduced in release: 7.0.5

Syntax: non-empty-string

service.imapproxy.plaintextmincipher

If the plaintextmincipher option under imapproxy or popproxy is > 0, then disable use of plaintext passwords over the respective service unless a security layer (SSL or TLS) is activated for the selected service. This forces users to enable SSL or TLS on their client to login which prevents exposure of their passwords on the network.

Introduced in release: 7.0.5

Syntax: int32

Default: 0

service.listenaddr
IPv4 address interface to which Messaging Server binds
For more information see listenaddr Option.

Syntax: interface-address

Default: INADDR_ANY

service.loginseparator
Character(s) for login separator (between userid & domain)
For more information see loginseparator Option.

Syntax: non-empty-string

Default: @

service.metermaid.sslcachesize
Number of SSL sessions cached by the MeterMaid server
For more information see sslcachesize Option.

Introduced in release: 8.0

Updated in release: 8.0

Syntax: uint32

Default setting is computed; see text for details

service.metermaid.sslusessl
Whether to enable SSL for incoming connections
For more information see sslusessl Option.

Introduced in release: 8.0

Updated in release: 8.0

Syntax: bool

Default: 0

service.mmp.numprocesses
Number of MMP AService processes
For more information see numprocesses Option.

Introduced in release: 7 Update 4 patch 25

Syntax: uint32

Default: 1

service.pop.allowanonymouslogin
Control whether or not anonymous login is allowed by POP
For more information see allowanonymouslogin Option.

Syntax: bool

Default: 0

service.pop.banner
Template for the POP banner string
For more information see banner Option.

Syntax: non-empty-string

Default: %h %p service (%P %V)

service.pop.connlimits
Max # connections permitted from IP realm to POP
For more information see connlimits Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.pop.domainallowed
Access filters specify which domains/IPs allowed to POP
For more information see domainallowed Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.pop.domainnotallowed
Access filters specify which domains/IPs not allowed access
For more information see domainnotallowed Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

service.pop.emulateqpopper
RESTRICTED: Hack to emulate qpopper behavior
For more information see emulateqpopper Option.

Syntax: bool

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

service.pop.enable
Enable the POP server on start-msg startup
For more information see enable Option.

Syntax: bool

Default: 0

service.pop.enablesslport

The enablesslport POP option sets whether or not POP over SSL service is started; if enabled, this service uses the port set in the sslport POP option. For the 7.0.5 release, the sslusessl POP option must also be explicitly set to enable the separate SSL port. For the 8.0 release, setting this option enables the separate SSL port and it is no longer necessary to explicitly set the sslusessl POP option.

Syntax: bool

Default: 0

service.pop.idletimeout (minutes)
Maximum idle time (minutes) for POP connections
For more information see idletimeout Option.

Syntax: uint32

Default: 10

service.pop.logunauthsession
Enable log messages from unauthenticated POP sessions
For more information see logunauthsession Option.

Introduced in release: 8.0

Syntax: bool

service.pop.maxsessions
Maximum number of sessions for the POP server process
For more information see maxsessions Option.

Syntax: uint32

Default: 600

service.pop.maxthreads
Maximum number of threads for POP server process
For more information see maxthreads Option.

Syntax: uint32

Default: 250

service.pop.numprocesses
Number of POP server processes
For more information see numprocesses Option.

Syntax: uint32

Default: 1

service.pop.plaintextmincipher
Plaintext passwords require SSL/TLS protection
For more information see plaintextmincipher Option.

Syntax: int32

Default: 0

service.pop.port
POP server port number
For more information see port Option.

Syntax: uint16

Default: 110

service.pop.sslcachesize
Number of SSL sessions cached by the POP server
For more information see sslcachesize Option.

Updated in release: 8.0

Syntax: uint32

Default setting is computed; see text for details

service.pop.sslport
Port on which the POP+SSL server listens
For more information see sslport Option.

Updated in release: 8.0

Syntax: uint16

Default: 995

service.pop.sslusessl

If a server certificate is installed and the sslusessl POP option is not set to 0, then STARTTLS is enabled on the POP server (listening at its regular port).

As regards listening at a separate sslport, note that for the 7.0.5 release, the sslusessl option must be explicitly set to 1 (even though the default was 1) as well as setting pop.enablesslport to enable SSL connections on a separate sslport. For the 8.0 release, it is no longer necessary to explicitly set this option in order to enable SSL connections on a separate port.

Updated in release: 8.0

Syntax: bool

Default: 1

service.popproxy.domainallowed

The domainallowed IMAP Proxy/POP Proxy option (also available under ens, eval_ldapd, http, imap, and pop) specifies access filters specifying which domains and/or IP addresses are allowed access for the selected server.

Introduced in release: 7.0.5

Syntax: non-empty-string

service.popproxy.domainnotallowed
subsubitem="domainnotallowed MMP/IMAP Proxy option"/>

The domainnotallowed IMAP Proxy/POP Proxy option (also available at other levels) specifies access filters specifying which domains and/or IP addresses are not allowed access for the selected server.

Introduced in release: 7.0.5

Syntax: non-empty-string

service.popproxy.plaintextmincipher

If the plaintextmincipher option is > 0 for a service, then disable use of plaintext passwords over that service unless a security layer (SSL or TLS) is activated for the selected service. This forces users to enable SSL or TLS on their client to login which prevents exposure of their passwords on the network.

Introduced in release: 7.0.5

Syntax: int32

Default: 0

service.readtimeout (seconds)
Timeout (seconds) msprobe waits before restarting service
For more information see timeout Option.

Syntax: uint32

Default: 30

service.smtp.plaintextmincipher
Disable plaintext SMTP AUTH unless SSL or TLS is active
For more information see plaintextmincipher Option.

Introduced in release: 7 Update 4

Syntax: int32

Default: 0

store.admins
List of user ids with store admin privileges
For more information see admins Option.

Syntax: non-empty-string

Default: admin

store.allowbadmailbox
RESTRICTED: allow creation of invalid mailbox names
For more information see allowbadmailbox Option.

Introduced in release: 8.0.2

Syntax: enumint

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

store.archive.compliance
Enable compliance archiving of the Message Store
For more information see compliance Option.

Syntax: bool

Default: 0

store.archive.destination

If set, the store.archive.destination option specifies the address where Exchange Journal format archive messages generated by message store compliance archiving are to be sent. If the option is not set, archive messages are sent to the addresses specified in the domain capture and user capture LDAP attributes associated with the user performing the IMAP APPEND operation.

Introduced in release: 8.0.1

Syntax: rfc822addr

store.archive.intext
Whether address reversal determines internal vs. external
For more information see intext Option.

Introduced in release: 7 Update 4 patch 26

Syntax: bool

Default: 0

store.archive.path
Archive injection directory
For more information see path Option.

Syntax: non-empty-string

store.archive.posteddatemode
Control what to put in Axs:One PostedDate field
For more information see posteddatemode Option.

Introduced in release: 7 Update 4 patch 26

Syntax: int32

Default: 100

store.archive.reportdir
Confirmation report directory for Message Store archiving
For more information see reportdir Option.

Syntax: absdirpath

store.archive.retrieveport
Archive retrieve server port
For more information see retrieveport Option.

Syntax: uint16

Default: 80

store.archive.retrieveserver
Archive retrieve server
For more information see retrieveserver Option.

Syntax: non-empty-string

This feature is disabled unless this option is set

store.archive.retrievetimeout (seconds)
Archive retrieve timeout in seconds
For more information see retrievetimeout Option.

Syntax: uint32

Default: 30

store.archive.source_channel

The store.archive.source_channel option specifies the name of the MTA channel used to submit Microsoft Exchange Journal format messages. This option must be set (to the name of a valid MTA channel) when Message Store archive journal format is set (store.archive.style=3). It is recommended that a distinct MTA channel be created for this Message Store journal archive purpose, so that such submissions are clearly identifiable in the MTA message transaction logs.

Introduced in release: 8.0.1

Syntax: mtachan

store.archive.style
Archive message format
For more information see style Option.

Introduced in release: 8.0.1

Syntax: enumint

Default: 1

store.archive.tmpdir
Temporary directory for archived message retrieval
For more information see tmpdir Option.

Syntax: absdirpath

Default setting is computed; see text for details

store.archive.useheaderrecipients
Scavenge recipients from headers for operational archiving
For more information see useheaderrecipients Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 0

store.autorepair
Repair damaged Message Store mailboxes automatically
For more information see autorepair Option.

Syntax: bool

Default: 1

store.autorepairdebug
Backup mailbox index files to storedebug dir before repair
For more information see autorepairdebug Option.

Introduced in release: 7 Update 4 patch 26

Syntax: bool

Default: 0

store.cachepreviewlen
Message preview cache record length
For more information see cachepreviewlen Option.

Introduced in release: 8.0

Syntax: uint32

Default: 0

store.cascacherf
Replication factor for the cache keyspace
For more information see cascacherf Option.

Introduced in release: 8.0.2

Syntax: int32

Default: 1

store.casmaxconnectionsperhost
RESTRICTED: cassandra max connections per host
For more information see casmaxconnectionsperhost Option.

Introduced in release: 8.0.2

Syntax: int32

Default: 500

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

store.casmetarf
Replication factor for the meta keyspace
For more information see casmetarf Option.

Introduced in release: 8.0.2

Syntax: int32

Default: 3

store.casmsgrf
Replication factor for the msg keyspace
For more information see casmsgrf Option.

Introduced in release: 8.0.2

Syntax: int32

Default: 3

store.cassolrrf
Replication factor for the solr keyspace
For more information see cassolrrf Option.

Introduced in release: 8.0.2

Syntax: int32

Default: 2

store.checkpoint.debug
Enable Message Store checkpoint debugging
For more information see debug Option.

Syntax: int32

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

store.checkpoint.stresslimit (seconds)
Maximum stored checkpoint duration in seconds
For more information see stresslimit Option.

Syntax: uint32

Default: 60

store.cleanupage
Age in hours before purge of expired or expunged messages
For more information see cleanupage Option.

Updated in release: 8.0.2

Syntax: uint32

Default: 1

store.cleanupsize
Min # of expunged messages before purge removes permanently
For more information see cleanupsize Option.

Syntax: uint32

Default: 100

store.dbcachesize
Mailbox list database cache size
For more information see dbcachesize Option.

Updated in release: 7.0.5

Syntax: uint32

Default: 67108864

store.dblogregionmax
Size in bytes of the log area of the mboxlist environment
For more information see dblogregionmax Option.

Introduced in release: 7 Update 4 patch 26

Syntax: enumint

Default: 655360

store.dbregionmax
Maximum memory for shared structures in mboxlist environment
For more information see dbregionmax Option.

Introduced in release: 7.0.5

Syntax: enumint

Default: 33554432

store.dbreplicate.ackpolicy
Transaction commit acknowledgement policy
For more information see ackpolicy Option.

Introduced in release: 7.0.5

Syntax: enumint

Default: 3

store.dbreplicate.acktimeout (seconds)
Timeout for enough replication acknowledgements
For more information see acktimeout Option.

Introduced in release: 7.0.5

Syntax: uint16

Default: 1

store.dbreplicate.dbpriority
Replication site priority
For more information see dbpriority Option.

Introduced in release: 7.0.5

Syntax: uint32

Default: 100

store.dbreplicate.dbremotehost
List of remote hosts in replication group
For more information see dbremotehost Option.

Introduced in release: 7.0.5

Updated in release: 8.0.1

Syntax: host-list

Default setting is computed; see text for details

store.dbreplicate.debug
DELETED: Enable mboxlist database replication debugging
For more information see debug Option.

Deleted in release: 7.0.5

Syntax: int32

Default: 0

store.dbreplicate.enable
Enable mboxlist database replication
For more information see enable Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 0

store.dbreplicate.port
mboxlist database replication port number
For more information see port Option.

Introduced in release: 7.0.5

Syntax: uint16

Default: 55000

store.dbreplicate.queuemax
Replication manager incoming queue max
For more information see queuemax Option.

Introduced in release: 8.0

Syntax: uint32

Default: 104857600

store.dbreplicate.twosites
Two sites replication group
For more information see twosites Option.

Introduced in release: 8.0

Syntax: bool

Default: 0

store.dbtmpdir
Mailbox list database temporary directory
For more information see dbtmpdir Option.

Syntax: absdirpath

Default setting is computed; see text for details

store.dbtype
Message Store database type.
For more information see dbtype Option.

Introduced in release: 8.0.2

Syntax: enumstr

Default: bdb

store.defaultmailboxquota
Default mailbox quota (bytes)
For more information see defaultmailboxquota Option.

Syntax: non-empty-string

Default: -1

store.defaultmessagequota
Default message quota (number of messages)
For more information see defaultmessagequota Option.

Syntax: non-empty-string

Default: -1

store.defaultpartition
Default partition
For more information see defaultpartition Option.

Syntax: non-empty-string

Default: primary

store.encryptnew
RESTRICTED: Encrypt new messages
For more information see encryptnew Option.

Introduced in release: 7.0.5

Syntax: bool

Default: 0

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

store.expire.ldap_rule_attr
Enable use of Sieve scripts in Message Store expire rules
For more information see expireldap_attr Option.

Syntax: non-empty-string

Default: inetCOS

store.expire.ldap_rules
Enable use of Sieve scripts in Message Store expire rules
For more information see expireldap_rules Option.

Syntax: bool

Default: 0

store.expire.sieve
Enable use of Sieve scripts in Message Store expire rules
For more information see expiresieve Option.

Syntax: bool

Default: 0

store.expirerule.*.deleted
"Deleted" system flag "ANDed" vs. "ORed" with expire rules
For more information see deleted Option.

Syntax: enumstr

Default: and

store.expirerule.*.exclusive
Set rule as exclusive rule to be applied to mailbox
For more information see exclusive Option.

Syntax: bool

Default: 0

store.expirerule.*.folderpattern
Specify the folders for which the expirerule applies
For more information see folderpattern Option.

Syntax: non-empty-string

store.expirerule.*.foldersizebytes
Specify the maximum number of bytes in a folder
For more information see foldersizebytes Option.

Syntax: uint32

Default: 0

store.expirerule.*.messagecount
Specify the maximum number of messages in a folder
For more information see messagecount Option.

Syntax: uint32

Default: 0

store.expirerule.*.messagedays
Maximum number of days a message may remain in the Store
For more information see messagedays Option.

Syntax: uint32

Default: 0

store.expirerule.*.messagesize
Maximum size of message to be retained (not expunged)
For more information see messagesize Option.

Syntax: uint32

Default: 0

store.expirerule.*.messagesizedays
Grace period to retain an over-sized message
For more information see messagesizedays Option.

Syntax: uint32

Default: 0

store.expirerule.*.seen
Whether 'Seen' status is ANDed or ORed with expire criteria
For more information see seen Option.

Syntax: enumstrcase

store.folderlockcount
Maximum number of folder locks
For more information see folderlockcount Option.

Introduced in release: 7.0.5

Syntax: uint32

Default: 10000

store.folderquota.enable
Enable quota by folder
For more information see enable Option.

Syntax: bool

Default: 0

store.indexeradmins
List of user ids with store indexer admin privileges
For more information see indexeradmins Option.

Syntax: non-empty-string

store.indexmapreadonly
Control memory mapping of Message Store index file
For more information see indexmapreadonly Option.

Introduced in release: 8.0.1

Syntax: bool

Default: 0

store.keylabel
RESTRICTED: Label of the Message Store key in the keystore
For more information see keylabel Option.

Introduced in release: 7.0.5

Syntax: non-empty-string

Default: msgstore

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

store.keypass
RESTRICTED: Keystore password
For more information see keypass Option.

Introduced in release: 7.0.5

Syntax: password

This is a restricted option. Setting this to a non-default value may result in an unsupported configuration unless you have been specifically directed to do so by Oracle support.

store.mailboxpurgedelay
After a mailbox is deleted, purge data after cleanupage time
For more information see mailboxpurgedelay Option.

Introduced in release: 7 Update 4 patch 26

Syntax: bool

Default: 0

store.maxcachefilesize
Maximum cache file size in bytes
For more information see maxcachefilesize Option.

Introduced in release: 7.0

Syntax: uint32

Default: 536870912

store.messagetype.*
Define a message type
For more information see contenttype Option.

Syntax: non-empty-string

store.messagetype.*.flagname
The Message Store flag name for a defined message type
For more information see flagname Option.

Syntax: non-empty-string

store.messagetype.*.quotaroot
Quota root for a Message Store message type
For more information see quotaroot Option.

Syntax: non-empty-string

store.messagetype.enable
Enable Message Store message typing
For more information see enable Option.

Syntax: bool

Default: 0

store.messagetype.header
Define an alternative message type header field
For more information see header Option.

Syntax: non-empty-string

store.msghash.dbcachesize
Message hash database cache size
For more information see dbcachesize Option.

Syntax: uint32

Default: 8388608

store.msghash.enable
Enable message hash database
For more information see enable Option.

Syntax: bool

Default: 0

store.msghash.nummsgs
Message hash database size
For more information see nummsgs Option.

Syntax: uint32

Default: 0

store.partition.*.cachepath
Path name of a store partitition for mailbox cache files
For more information see cachepath Option.

Syntax: dirpath

store.partition.*.messagepath
Path name of a store partition containing the message files
For more information see messagepath Option.

Syntax: dirpath

Default setting is computed; see text for details

store.partition.*.path
Specify the path name of a Message Store partition
For more information see path Option.

Syntax: non-empty-string

store.partition.primary.path

The partition:primary.path option specifies the path name of the primary partition; (if not a full path, this is relative to the store/partition subdirectory of the data directory).

Note that the defaultpartition Message Store option defaults to "primary" -- so the definition of the partition named "primary" normally defines the partition that the Message Store uses by default.

Syntax: non-empty-string

Default: primary

store.privatesharedfolders.restrictanyone
Regular users can't share private folders with anyone
For more information see restrictanyone Option.

Syntax: bool

Default: 0

store.privatesharedfolders.restrictdomain
Regular users can't share private folders outside domain
For more information see restrictdomain Option.

Updated in release: 8.0.2

Syntax: bool

Default: 0

store.privatesharedfolders.shareflags
Private shared folders share \Seen & \Deleted across users
For more information see shareflags Option.

Syntax: bool

Default: 0

store.publicsharedfolders.user
User ID of owner of public shared folder
For more information see user Option.

Syntax: printable-ascii-string

store.purge.count
Min # of expunged cache records before purge removes them
For more information see count Option.

Syntax: enumint

Default: 500

store.purge.maxthreads
Maximum number of threads for Message Store purge job
For more information see maxthreads Option.

Syntax: uint32

Default: 64

store.purge.percentage
% of expunged cache records before purge removes
For more information see percentage Option.

Syntax: enumint

Default: 5

store.quotaenforcement
Enable Message Store quota enforcement
For more information see quotaenforcement Option.

Syntax: bool

Default: 1

store.quotaexceededmsg

The quotaexceededmsg Message Store option specifies the warning message to be sent to a user when a user's quota exceeds the warning threshold. In default operation (quotaoverdraft not enabled), the warning threshold is determined by the quotawarn Message Store option (legacy configuration, store.quotawarn). But when quotaoverdraft has been enabled, either explicitly or implicitly via overquotastatus, then instead the warning is generated only when a user actually exceeds their quota.

There is support for the following variable substitutions:

[ID] userid [DISKUSAGE] disk usage [DOMAIN] user's domain (new in 8.0.1.3) [NUMMSG] number of messages [PERCENT] store.quotawarnpercentage [POSTMASTER] postmaster address for user's domain (new in 8.0.1.3) [QUOTA] mailquota attribute value [MSGQUOTA] mailmsgquota attribute value

The message must contain a header (with at least a subject line), followed by $$, then the message body. The $ represents a new line.

Note that the From: header line on the notification message will be:

From: Mail Administrator <Postmaster@<em>base.hostname</em>>

substituting in the value of base.hostname (or local.hostname in legacy configuration).

Syntax: non-empty-string

store.quotaexceededmsg;lang-*

The quotaexceededmsg option under a named message_language group specifies a localized message to be sent to user when quota exceeds the warning threshold. In default operation (quotaoverdraft not enabled), the warning threshold is determined by the quotawarn Message Store option (legacy configuration, store.quotawarn). But when quotaoverdraft has been enabled, either explicitly or implicitly via overquotastatus, then instead the warning is generated only when a user actually exceeds their quota.

There is support for the following variables:

[ID] userid [DISKUSAGE] disk usage [DOMAIN] user's domain (new in 8.0.1.3) [NUMMSG] number of messages [PERCENT] store.quotawarnpercentage [POSTMASTER] postmaster address for user's domain (new in 8.0.1.3) [QUOTA] mailquota attribute value [MSGQUOTA] mailmsgquota attribute value

The message must contain a header (with at least a subject line), followed by $$, then the message body. The $ represents a new line.

Syntax: non-empty-string

store.quotaexceededmsginterval (days)
Interval (days) between sending quota exceeded message
For more information see quotaexceededmsginterval Option.

Syntax: int32

Default: 7

store.quotagraceperiod (hours)
Time (hours) a user may be over quota before messages bounce
For more information see quotagraceperiod Option.

Syntax: uint32

Default: 120

store.quotanotification
Enable quota notification
For more information see quotanotification Option.

Syntax: bool

Default: 0

store.quotawarn
Percentage of quota exceeded that triggers quota warning
For more information see quotawarn Option.

Syntax: int32

Default: 90

store.searchengine
Message Store search engine type.
For more information see searchengine Option.

Introduced in release: 8.0.2.2

Updated in release: 8.0.2.3

Syntax: enumstr

Default setting is computed; see text for details

store.serviceadmingroupdn
DN of service administrator group
For more information see serviceadmingroupdn Option.

Syntax: non-empty-string

store.typequota.enable
Enable per-message-type quotas
For more information see enable Option.

Syntax: bool

Default: 0

store.umask
File mode creation mask for Message Store processes
For more information see umask Option.

Syntax: uoctal

Default: 077

store.undeleteflag
Sets $undeleted flag when \Deleted flag is cleared via IMAP
For more information see undeleteflag Option.

Introduced in release: 8.0.1

Syntax: bool

Default: 0

transactlog.allocsize (bytes)
Threshold for logging big memory events
For more information see allocsize Option.

Introduced in release: 8.0.2.2

Syntax: enumint

Default: 1073741824