public static final String |
CONFIG_PREFIX |
"ldap." |
public static final String |
GROUP_DN_NAME_PATTERN_DEFAULT |
"" |
public static final String |
GROUP_DN_NAME_PATTERN_DOC |
"Java regular expression pattern used to extract group name from the distinguished name of the group when group is renamed. This is used only when persistent search is enabled. By default the \'ldap.group.name.attribute\' is extracted from the DN" |
public static final String |
GROUP_DN_NAME_PATTERN_PROP |
"ldap.group.dn.name.pattern" |
public static final String |
GROUP_MEMBER_ATTRIBUTE_DEFAULT |
"member" |
public static final String |
GROUP_MEMBER_ATTRIBUTE_DOC |
"Name of attribute that contains the members of the group in a group entry obtained using an LDAP search. A regex pattern may be specified to extract the user principals from this attribute by configuring \'ldap.group.member.attribute.pattern\'." |
public static final String |
GROUP_MEMBER_ATTRIBUTE_PATTERN_DEFAULT |
"" |
public static final String |
GROUP_MEMBER_ATTRIBUTE_PATTERN_DOC |
"Java regular expression pattern used to extract the user principals of group members from group member entries obtained from the LDAP attribute specified using \'ldap.group.member.attribute`. By default the full value of the attribute is used" |
public static final String |
GROUP_MEMBER_ATTRIBUTE_PATTERN_PROP |
"ldap.group.member.attribute.pattern" |
public static final String |
GROUP_MEMBER_ATTRIBUTE_PROP |
"ldap.group.member.attribute" |
public static final String |
GROUP_NAME_ATTRIBUTE_DEFAULT |
"cn" |
public static final String |
GROUP_NAME_ATTRIBUTE_DOC |
"Name of attribute that contains the name of the group in a group entry obtained using an LDAP search. A regex pattern may be specified to extract the group name used in ACLs from this attribute by configuring \'ldap.group.name.attribute.pattern\'." |
public static final String |
GROUP_NAME_ATTRIBUTE_PATTERN_DEFAULT |
"" |
public static final String |
GROUP_NAME_ATTRIBUTE_PATTERN_DOC |
"Java regular expression pattern used to extract the group name used in ACLs from the name of the group obtained from the LDAP attribute specified using \'ldap.group.name.attribute`. By default the full value of the attribute is used" |
public static final String |
GROUP_NAME_ATTRIBUTE_PATTERN_PROP |
"ldap.group.name.attribute.pattern" |
public static final String |
GROUP_NAME_ATTRIBUTE_PROP |
"ldap.group.name.attribute" |
public static final String |
GROUP_OBJECT_CLASS_DEFAULT |
"groupOfNames" |
public static final String |
GROUP_OBJECT_CLASS_DOC |
"LDAP object class for groups." |
public static final String |
GROUP_OBJECT_CLASS_PROP |
"ldap.group.object.class" |
public static final String |
GROUP_SEARCH_BASE_DEFAULT |
"ou=groups" |
public static final String |
GROUP_SEARCH_BASE_DOC |
"LDAP search base for group-based search." |
public static final String |
GROUP_SEARCH_BASE_PROP |
"ldap.group.search.base" |
public static final String |
GROUP_SEARCH_FILTER_DEFAULT |
"" |
public static final String |
GROUP_SEARCH_FILTER_DOC |
"LDAP search filter for group-based search." |
public static final String |
GROUP_SEARCH_FILTER_PROP |
"ldap.group.search.filter" |
public static final int |
GROUP_SEARCH_SCOPE_DEFAULT |
1 |
public static final String |
GROUP_SEARCH_SCOPE_DOC |
"LDAP search scope for group-based search. Valid values are 0 (OBJECT), 1 (ONELEVEL) and 2 (SUBTREE)." |
public static final String |
GROUP_SEARCH_SCOPE_PROP |
"ldap.group.search.scope" |
public static final String |
IGNORE_PARTIAL_RESULT_EXCEPTION |
"ldap.ignore.partial.result.exception" |
public static final String |
IGNORE_PARTIAL_RESULT_EXCEPTION_DOC |
"Indicate whether ignore partial result exception" |
public static final String |
JAVA_NAMING_SOCKET_FACTORY_PROP |
"java.naming.ldap.factory.socket" |
public static final long |
JNDI_CONNECT_TIMEOUT_MS_DEFAULT |
30000L |
public static final long |
JNDI_READ_TIMEOUT_MS_DEFAULT |
30000L |
public static final String |
JNDI_READ_TIMEOUT_MS_PROP |
"com.sun.jndi.ldap.read.timeout" |
public static final int |
PERSISTENT_REFRESH |
0 |
public static final String |
PRINCIPAL_MAPPING_DOC |
"Defines the mechanism used for mapping the user\'s Principal.Following modes exist: 1. \'default\' - (default mode) this mode would store the username (used during AuthN) in the user\'s principal for AuthZ.2. \'ldap\' - this mode would extract the user\'s principal from LDAP records (which can be of different casing from the username during AuthN) and uses that for AuthZ. " |
public static final String |
PRINCIPAL_MAPPING_PROP |
"ldap.principal.mapping" |
public static final int |
REFRESH_INTERVAL_MS_DEFAULT |
60000 |
public static final String |
REFRESH_INTERVAL_MS_DOC |
"LDAP group cache refresh interval in milliseconds. If set to zero, persistent LDAP search is used." |
public static final String |
REFRESH_INTERVAL_MS_PROP |
"ldap.refresh.interval.ms" |
public static final int |
RETRY_BACKOFF_MAX_MS_DEFAULT |
1000 |
public static final String |
RETRY_BACKOFF_MAX_MS_DOC |
"Maximum retry backoff in milliseconds. Exponential backoff is used if \'ldap.retry.backoff.ms\' is set to a lower value." |
public static final String |
RETRY_BACKOFF_MAX_MS_PROP |
"ldap.retry.backoff.max.ms" |
public static final int |
RETRY_BACKOFF_MS_DEFAULT |
100 |
public static final String |
RETRY_BACKOFF_MS_DOC |
"Initial retry backoff in milliseconds. Exponential backoff is used if \'ldap.retry.backoff.max.ms\' is set to a higher value." |
public static final String |
RETRY_BACKOFF_MS_PROP |
"ldap.retry.backoff.ms" |
public static final int |
RETRY_TIMEOUT_MS_DEFAULT |
86400000 |
public static final String |
RETRY_TIMEOUT_MS_DOC |
"Timeout for LDAP search retries after which the LDAP authorizer is marked as failed. All requests are denied access if a successful cache refresh cannot be performed within this time." |
public static final String |
RETRY_TIMEOUT_MS_PROP |
"ldap.retry.timeout.ms" |
public static final String |
SEARCH_MODE_DOC |
"LDAP search mode that indicates if user to group mapping is retrieved by searching for group or user entries. Valid values are USERS and GROUPS." |
public static final String |
SEARCH_MODE_PROP |
"ldap.search.mode" |
public static final int |
SEARCH_PAGE_SIZE_DEFAULT |
0 |
public static final String |
SEARCH_PAGE_SIZE_DOC |
"Page size for LDAP search if persistent search is disabled (refresh interval is greater than zero). Paging is disabled by default." |
public static final String |
SEARCH_PAGE_SIZE_PROP |
"ldap.search.page.size" |
public static final String |
USER_DN_NAME_PATTERN_DEFAULT |
"" |
public static final String |
USER_DN_NAME_PATTERN_DOC |
"Java regular expression pattern used to extract user name from the distinguished name of the user when user is renamed. This is used only when persistent search is enabled. By default the \'ldap.user.name.attribute\' is extracted from the DN" |
public static final String |
USER_DN_NAME_PATTERN_PROP |
"ldap.user.dn.name.pattern" |
public static final String |
USER_MEMBEROF_ATTRIBUTE_DEFAULT |
"memberof" |
public static final String |
USER_MEMBEROF_ATTRIBUTE_DOC |
"Name of attribute that contains the groups in a user entry obtained using an LDAP search. A regex pattern may be specified to extract the group names used in ACLs from this attribute by configuring \'ldap.user.memberof.attribute.pattern\'." |
public static final String |
USER_MEMBEROF_ATTRIBUTE_PATTERN_DEFAULT |
"" |
public static final String |
USER_MEMBEROF_ATTRIBUTE_PATTERN_DOC |
"Java regular expression pattern used to extract the names of groups from user entries obtained from the LDAP attribute specified using \'ldap.user.memberof.attribute`. By default the full value of the attribute is used" |
public static final String |
USER_MEMBEROF_ATTRIBUTE_PATTERN_PROP |
"ldap.user.memberof.attribute.pattern" |
public static final String |
USER_MEMBEROF_ATTRIBUTE_PROP |
"ldap.user.memberof.attribute" |
public static final String |
USER_NAME_ATTRIBUTE_DEFAULT |
"uid" |
public static final String |
USER_NAME_ATTRIBUTE_DOC |
"Name of attribute that contains the user principal in a user entry obtained using an LDAP search. A regex pattern may be specified to extract the user principal from this attribute by configuring \'ldap.user.name.attribute.pattern\'." |
public static final String |
USER_NAME_ATTRIBUTE_PATTERN_DEFAULT |
"" |
public static final String |
USER_NAME_ATTRIBUTE_PATTERN_DOC |
"Java regular expression pattern used to extract the user principal from the name of the user obtained from the LDAP attribute specified using \'ldap.user.name.attribute`. By default the full value of the attribute is used" |
public static final String |
USER_NAME_ATTRIBUTE_PATTERN_PROP |
"ldap.user.name.attribute.pattern" |
public static final String |
USER_NAME_ATTRIBUTE_PROP |
"ldap.user.name.attribute" |
public static final String |
USER_OBJECT_CLASS_DEFAULT |
"person" |
public static final String |
USER_OBJECT_CLASS_DOC |
"LDAP object class for users." |
public static final String |
USER_OBJECT_CLASS_PROP |
"ldap.user.object.class" |
public static final String |
USER_PASSWORD_ATTRIBUTE_DOC |
"Name of attribute that contains the password in a user entry obtained using an LDAP search for simple username/password authentication. By default, authentication is performed using simple binding with the provided credentials. This config may be used in deployments where simple binding is disabled for some users." |
public static final String |
USER_PASSWORD_ATTRIBUTE_PROP |
"ldap.user.password.attribute" |
public static final String |
USER_SEARCH_BASE_DEFAULT |
"ou=users" |
public static final String |
USER_SEARCH_BASE_DOC |
"LDAP search base for user-based search." |
public static final String |
USER_SEARCH_BASE_PROP |
"ldap.user.search.base" |
public static final String |
USER_SEARCH_FILTER_DEFAULT |
"" |
public static final String |
USER_SEARCH_FILTER_DOC |
"LDAP search filter for user-based search." |
public static final String |
USER_SEARCH_FILTER_PROP |
"ldap.user.search.filter" |
public static final int |
USER_SEARCH_SCOPE_DEFAULT |
1 |
public static final String |
USER_SEARCH_SCOPE_DOC |
"LDAP search scope for user-based search. Valid values are 0 (OBJECT), 1 (ONELEVEL) and 2 (SUBTREE)." |
public static final String |
USER_SEARCH_SCOPE_PROP |
"ldap.user.search.scope" |