public static final java.lang.String |
CONFIG_PREFIX |
"ldap." |
public static final java.lang.String |
GROUP_DN_NAME_PATTERN_DEFAULT |
"" |
public static final java.lang.String |
GROUP_DN_NAME_PATTERN_DOC |
"Java regular expression pattern used to extract group name from the distinguished name of the group when group is renamed. This is used only when persistent search is enabled. By default the \'ldap.group.name.attribute\' is extracted from the DN" |
public static final java.lang.String |
GROUP_DN_NAME_PATTERN_PROP |
"ldap.group.dn.name.pattern" |
public static final java.lang.String |
GROUP_MEMBER_ATTRIBUTE_DEFAULT |
"member" |
public static final java.lang.String |
GROUP_MEMBER_ATTRIBUTE_DOC |
"Name of attribute that contains the members of the group in a group entry obtained using an LDAP search. A regex pattern may be specified to extract the user principals from this attribute by configuring \'ldap.group.member.attribute.pattern\'." |
public static final java.lang.String |
GROUP_MEMBER_ATTRIBUTE_PATTERN_DEFAULT |
"" |
public static final java.lang.String |
GROUP_MEMBER_ATTRIBUTE_PATTERN_DOC |
"Java regular expression pattern used to extract the user principals of group members from group member entries obtained from the LDAP attribute specified using \'ldap.group.member.attribute`. By default the full value of the attribute is used" |
public static final java.lang.String |
GROUP_MEMBER_ATTRIBUTE_PATTERN_PROP |
"ldap.group.member.attribute.pattern" |
public static final java.lang.String |
GROUP_MEMBER_ATTRIBUTE_PROP |
"ldap.group.member.attribute" |
public static final java.lang.String |
GROUP_NAME_ATTRIBUTE_DEFAULT |
"cn" |
public static final java.lang.String |
GROUP_NAME_ATTRIBUTE_DOC |
"Name of attribute that contains the name of the group in a group entry obtained using an LDAP search. A regex pattern may be specified to extract the group name used in ACLs from this attribute by configuring \'ldap.group.name.attribute.pattern\'." |
public static final java.lang.String |
GROUP_NAME_ATTRIBUTE_PATTERN_DEFAULT |
"" |
public static final java.lang.String |
GROUP_NAME_ATTRIBUTE_PATTERN_DOC |
"Java regular expression pattern used to extract the group name used in ACLs from the name of the group obtained from the LDAP attribute specified using \'ldap.group.name.attribute`. By default the full value of the attribute is used" |
public static final java.lang.String |
GROUP_NAME_ATTRIBUTE_PATTERN_PROP |
"ldap.group.name.attribute.pattern" |
public static final java.lang.String |
GROUP_NAME_ATTRIBUTE_PROP |
"ldap.group.name.attribute" |
public static final java.lang.String |
GROUP_OBJECT_CLASS_DEFAULT |
"groupOfNames" |
public static final java.lang.String |
GROUP_OBJECT_CLASS_DOC |
"LDAP object class for groups." |
public static final java.lang.String |
GROUP_OBJECT_CLASS_PROP |
"ldap.group.object.class" |
public static final java.lang.String |
GROUP_SEARCH_BASE_DEFAULT |
"ou=groups" |
public static final java.lang.String |
GROUP_SEARCH_BASE_DOC |
"LDAP search base for group-based search." |
public static final java.lang.String |
GROUP_SEARCH_BASE_PROP |
"ldap.group.search.base" |
public static final java.lang.String |
GROUP_SEARCH_FILTER_DEFAULT |
"" |
public static final java.lang.String |
GROUP_SEARCH_FILTER_DOC |
"LDAP search filter for group-based search." |
public static final java.lang.String |
GROUP_SEARCH_FILTER_PROP |
"ldap.group.search.filter" |
public static final int |
GROUP_SEARCH_SCOPE_DEFAULT |
1 |
public static final java.lang.String |
GROUP_SEARCH_SCOPE_DOC |
"LDAP search scope for group-based search. Valid values are 0 (OBJECT), 1 (ONELEVEL) and 2 (SUBTREE)." |
public static final java.lang.String |
GROUP_SEARCH_SCOPE_PROP |
"ldap.group.search.scope" |
public static final java.lang.String |
JAVA_NAMING_SOCKET_FACTORY_PROP |
"java.naming.ldap.factory.socket" |
public static final long |
JNDI_CONNECT_TIMEOUT_MS_DEFAULT |
30000L |
public static final long |
JNDI_READ_TIMEOUT_MS_DEFAULT |
30000L |
public static final java.lang.String |
JNDI_READ_TIMEOUT_MS_PROP |
"com.sun.jndi.ldap.read.timeout" |
public static final int |
PERSISTENT_REFRESH |
0 |
public static final int |
REFRESH_INTERVAL_MS_DEFAULT |
60000 |
public static final java.lang.String |
REFRESH_INTERVAL_MS_DOC |
"LDAP group cache refresh interval in milliseconds. If set to zero, persistent LDAP search is used." |
public static final java.lang.String |
REFRESH_INTERVAL_MS_PROP |
"ldap.refresh.interval.ms" |
public static final int |
RETRY_BACKOFF_MAX_MS_DEFAULT |
1000 |
public static final java.lang.String |
RETRY_BACKOFF_MAX_MS_DOC |
"Maximum retry backoff in milliseconds. Exponential backoff is used if \'ldap.retry.backoff.ms\' is set to a lower value." |
public static final java.lang.String |
RETRY_BACKOFF_MAX_MS_PROP |
"ldap.retry.backoff.max.ms" |
public static final int |
RETRY_BACKOFF_MS_DEFAULT |
100 |
public static final java.lang.String |
RETRY_BACKOFF_MS_DOC |
"Initial retry backoff in milliseconds. Exponential backoff is used if \'ldap.retry.backoff.max.ms\' is set to a higher value." |
public static final java.lang.String |
RETRY_BACKOFF_MS_PROP |
"ldap.retry.backoff.ms" |
public static final int |
RETRY_TIMEOUT_MS_DEFAULT |
86400000 |
public static final java.lang.String |
RETRY_TIMEOUT_MS_DOC |
"Timeout for LDAP search retries after which the LDAP authorizer is marked as failed. All requests are denied access if a successful cache refresh cannot be performed within this time." |
public static final java.lang.String |
RETRY_TIMEOUT_MS_PROP |
"ldap.retry.timeout.ms" |
public static final java.lang.String |
SEARCH_MODE_DOC |
"LDAP search mode that indicates if user to group mapping is retrieved by searching for group or user entries. Valid values are USERS and GROUPS." |
public static final java.lang.String |
SEARCH_MODE_PROP |
"ldap.search.mode" |
public static final int |
SEARCH_PAGE_SIZE_DEFAULT |
0 |
public static final java.lang.String |
SEARCH_PAGE_SIZE_DOC |
"Page size for LDAP search if persistent search is disabled (refresh interval is greater than zero). Paging is disabled by default." |
public static final java.lang.String |
SEARCH_PAGE_SIZE_PROP |
"ldap.search.page.size" |
public static final java.lang.String |
USER_DN_NAME_PATTERN_DEFAULT |
"" |
public static final java.lang.String |
USER_DN_NAME_PATTERN_DOC |
"Java regular expression pattern used to extract user name from the distinguished name of the user when user is renamed. This is used only when persistent search is enabled. By default the \'ldap.user.name.attribute\' is extracted from the DN" |
public static final java.lang.String |
USER_DN_NAME_PATTERN_PROP |
"ldap.user.dn.name.pattern" |
public static final java.lang.String |
USER_MEMBEROF_ATTRIBUTE_DEFAULT |
"memberof" |
public static final java.lang.String |
USER_MEMBEROF_ATTRIBUTE_DOC |
"Name of attribute that contains the groups in a user entry obtained using an LDAP search. A regex pattern may be specified to extract the group names used in ACLs from this attribute by configuring \'ldap.user.memberof.attribute.pattern\'." |
public static final java.lang.String |
USER_MEMBEROF_ATTRIBUTE_PATTERN_DEFAULT |
"" |
public static final java.lang.String |
USER_MEMBEROF_ATTRIBUTE_PATTERN_DOC |
"Java regular expression pattern used to extract the names of groups from user entries obtained from the LDAP attribute specified using \'ldap.user.memberof.attribute`. By default the full value of the attribute is used" |
public static final java.lang.String |
USER_MEMBEROF_ATTRIBUTE_PATTERN_PROP |
"ldap.user.memberof.attribute.pattern" |
public static final java.lang.String |
USER_MEMBEROF_ATTRIBUTE_PROP |
"ldap.user.memberof.attribute" |
public static final java.lang.String |
USER_NAME_ATTRIBUTE_DEFAULT |
"uid" |
public static final java.lang.String |
USER_NAME_ATTRIBUTE_DOC |
"Name of attribute that contains the user principal in a user entry obtained using an LDAP search. A regex pattern may be specified to extract the user principal from this attribute by configuring \'ldap.user.name.attribute.pattern\'." |
public static final java.lang.String |
USER_NAME_ATTRIBUTE_PATTERN_DEFAULT |
"" |
public static final java.lang.String |
USER_NAME_ATTRIBUTE_PATTERN_DOC |
"Java regular expression pattern used to extract the user principal from the name of the user obtained from the LDAP attribute specified using \'ldap.user.name.attribute`. By default the full value of the attribute is used" |
public static final java.lang.String |
USER_NAME_ATTRIBUTE_PATTERN_PROP |
"ldap.user.name.attribute.pattern" |
public static final java.lang.String |
USER_NAME_ATTRIBUTE_PROP |
"ldap.user.name.attribute" |
public static final java.lang.String |
USER_OBJECT_CLASS_DEFAULT |
"person" |
public static final java.lang.String |
USER_OBJECT_CLASS_DOC |
"LDAP object class for users." |
public static final java.lang.String |
USER_OBJECT_CLASS_PROP |
"ldap.user.object.class" |
public static final java.lang.String |
USER_PASSWORD_ATTRIBUTE_DOC |
"Name of attribute that contains the password in a user entry obtained using an LDAP search for simple username/password authentication. By default, authentication is performed using simple binding with the provided credentials. This config may be used in deployments where simple binding is disabled for some users." |
public static final java.lang.String |
USER_PASSWORD_ATTRIBUTE_PROP |
"ldap.user.password.attribute" |
public static final java.lang.String |
USER_SEARCH_BASE_DEFAULT |
"ou=users" |
public static final java.lang.String |
USER_SEARCH_BASE_DOC |
"LDAP search base for user-based search." |
public static final java.lang.String |
USER_SEARCH_BASE_PROP |
"ldap.user.search.base" |
public static final java.lang.String |
USER_SEARCH_FILTER_DEFAULT |
"" |
public static final java.lang.String |
USER_SEARCH_FILTER_DOC |
"LDAP search filter for user-based search." |
public static final java.lang.String |
USER_SEARCH_FILTER_PROP |
"ldap.user.search.filter" |
public static final int |
USER_SEARCH_SCOPE_DEFAULT |
1 |
public static final java.lang.String |
USER_SEARCH_SCOPE_DOC |
"LDAP search scope for user-based search. Valid values are 0 (OBJECT), 1 (ONELEVEL) and 2 (SUBTREE)." |
public static final java.lang.String |
USER_SEARCH_SCOPE_PROP |
"ldap.user.search.scope" |