WildFly 9.0 Model Reference

  1. WildFly 9.0
  2. core-service=management
  3. security-realm
  4. authorization=ldap
  5. group-search=principal-to-group
Deprecated Since 1.7.0
The security-realm configuration is deprecated and may be removed or moved in future versions.

A group search where the principal entries contain an attribute referencing the groups that they are a member of.

Children (1)

  • cache A cache for previous principal-to-group search results.
    • by-access-time A cache to hold the results of previous LDAP interactions.
    • by-search-time A cache to hold the results of previous LDAP interactions.

Attributes (7)

  • group-attribute The attribute on the principal which references the group the principal is a member of.
    • Attribute Value
    Default Value memberOf
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • group-dn-attribute Which attribute on a group entry is it's distinguished name.
    • Attribute Value
    Default Value dn
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • group-name An enumeration to identify if groups should be referenced using a simple name or their distinguished name.
    • Attribute Value
    Default Value SIMPLE
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
    Allowed Values DISTINGUISHED_NAME
    SIMPLE
  • group-name-attribute Which attribute on a group entry is it's simple name.
    • Attribute Value
    Default Value uid
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • iterative Should further searches be performed to identify groups that the groups identified are a member of?
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • prefer-original-connection After following a referral should subsequent searches prefer the original connection or use the connection of the last referral.
    • Attribute Value
    Default Value true
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • skip-missing-groups If a non-existent group is referenced should it be quietly ignored.
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services

Operations (2)

  • add Add the principal to group mapping.
    Request Parameter Type Required Expressions Allowed Default value Description
    group-attribute STRING false true memberOf The attribute on the principal which references the group the principal is a member of.
    group-dn-attribute STRING false true dn Which attribute on a group entry is it's distinguished name.
    group-name STRING false true SIMPLE An enumeration to identify if groups should be referenced using a simple name or their distinguished name.
    group-name-attribute STRING false true uid Which attribute on a group entry is it's simple name.
    iterative BOOLEAN false true false Should further searches be performed to identify groups that the groups identified are a member of?
    prefer-original-connection BOOLEAN false true true After following a referral should subsequent searches prefer the original connection or use the connection of the last referral.
    skip-missing-groups BOOLEAN false true false If a non-existent group is referenced should it be quietly ignored.
  • remove Remove the principal to group mapping.