JBoss EAP 6.3 Model Reference

  1. JBoss EAP 6.3
  2. core-service=management
  3. security-realm
  4. authorization=ldap
  5. username-to-dn=advanced-filter

An advanced filter configuration to identify the users distinguished name from the username.

Attributes (5)

  • base-dn The starting point of the search for the user.
    • Attribute Value
    Type STRING
    Nillable false
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • filter The filter to use for the LDAP search.
    • Attribute Value
    Type STRING
    Nillable false
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • force Authentication may have already converted the username to a distingushed name, force this to occur again before loading groups.
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • recursive Should levels below the starting point be recursively searched?
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • user-dn-attribute The attribute on the user entry that contains their distinguished name.
    • Attribute Value
    Default Value dn
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services

Operations (2)

  • add Add an advanced fiter.
    Request Parameter Type Required Expressions Allowed Default value Description
    base-dn STRING true true The starting point of the search for the user.
    recursive BOOLEAN false true false Should levels below the starting point be recursively searched?
    user-dn-attribute STRING false true dn The attribute on the user entry that contains their distinguished name.
    force BOOLEAN false true false Authentication may have already converted the username to a distingushed name, force this to occur again before loading groups.
    filter STRING true true The filter to use for the LDAP search.
  • remove Add an advanced fiter.