JBoss EAP 6.3 Model Reference

  1. JBoss EAP 6.3
  2. core-service=management
  3. security-realm
  4. authorization=ldap
  5. group-search=group-to-principal

A group search where the group entry contains an attribute referencing it's members.

Attributes (9)

  • base-dn The starting point of the search for the group.
    • Attribute Value
    Type STRING
    Nillable false
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • group-dn-attribute Which attribute on a group entry is it's distingushed name.
    • Attribute Value
    Default Value dn
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • group-name An enumeration to identify if groups should be referenced using a simple name or their distinguished name.
    • Attribute Value
    Default Value SIMPLE
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
    Allowed Values DISTINGUISHED_NAME
    SIMPLE
  • group-name-attribute Which attribute on a group entry is it's simple name.
    • Attribute Value
    Default Value uid
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • iterative Should further searches be performed to identify groups that the groups identified are a member of?
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • prefer-original-connection After following a referral should subsequent searches prefer the original connection or use the connection of the last referral.
    • Attribute Value
    Default Value true
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • principal-attribute The attribute on the group entry that references the principal.
    • Attribute Value
    Default Value member
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • recursive Should levels below the starting point be recursively searched?
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • search-by Should searches be performed using simple names or distinguished names?
    • Attribute Value
    Default Value DISTINGUISHED_NAME
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
    Allowed Values DISTINGUISHED_NAME
    SIMPLE

Operations (2)

  • add Add the group to principal mapping
    Request Parameter Type Required Expressions Allowed Default value Description
    principal-attribute STRING false true member The attribute on the group entry that references the principal.
    base-dn STRING true true The starting point of the search for the group.
    group-dn-attribute STRING false true dn Which attribute on a group entry is it's distingushed name.
    search-by STRING false true DISTINGUISHED_NAME Should searches be performed using simple names or distinguished names?
    recursive BOOLEAN false true false Should levels below the starting point be recursively searched?
    iterative BOOLEAN false true false Should further searches be performed to identify groups that the groups identified are a member of?
    prefer-original-connection BOOLEAN false true true After following a referral should subsequent searches prefer the original connection or use the connection of the last referral.
    group-name STRING false true SIMPLE An enumeration to identify if groups should be referenced using a simple name or their distinguished name.
    group-name-attribute STRING false true uid Which attribute on a group entry is it's simple name.
  • remove Remove the group to principal mapping