JBoss EAP 6.2 Model Reference

  1. JBoss EAP 6.2
  2. core-service=management
  3. security-realm
  4. authorization=ldap
  5. group-search=principal-to-group

A group search where the principal entries contain an attribute referencing the groups that they are a member of.

Attributes (5)

  • group-attribute The attribute on the principal which references the group the principal is a member of.
    • Attribute Value
    Default Value memberOf
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • group-dn-attribute Which attribute on a group entry is it's distingushed name.
    • Attribute Value
    Default Value dn
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • group-name An enumeration to identify if groups should be referenced using a simple name or their distinguished name.
    • Attribute Value
    Default Value SIMPLE
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
    Allowed Values DISTINGUISHED_NAME
    SIMPLE
  • group-name-attribute Which attribute on a group entry is it's simple name.
    • Attribute Value
    Default Value uid
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • iterative Should further searches be performed to identify groups that the groups identified are a member of?
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services

Operations (2)

  • add Add the principal to group mapping.
    Request Parameter Type Required Expressions Allowed Default value Description
    group-dn-attribute STRING false true dn Which attribute on a group entry is it's distingushed name.
    iterative BOOLEAN false true false Should further searches be performed to identify groups that the groups identified are a member of?
    group-name STRING false true SIMPLE An enumeration to identify if groups should be referenced using a simple name or their distinguished name.
    group-name-attribute STRING false true uid Which attribute on a group entry is it's simple name.
    group-attribute STRING false true memberOf The attribute on the principal which references the group the principal is a member of.
  • remove Remove the principal to group mapping.