Group Base DN

The base distinguished name (DN) of the tree in the LDAP directory that contains groups.

Attribute: GroupBaseDN

Default: "ou=groups, dc=example, dc=com"

Readable: yes

Group Search Scope

Specifies how deep in the LDAP directory tree to search for groups. Valid values are subtree and onelevel.

Attribute: GroupSearchScope

Default: "subtree"

Valid values:

• subtree

• onelevel

Readable: yes

Group From Name Filter

An LDAP search filter for finding a group given the name of the group. If the attribute is not specified (that is, if the attribute is null or empty), a default search filter is created based on the group schema.

Attribute: GroupFromNameFilter

Default: "(&(cn=%g)(objectclass=groupofnames))"

Readable: yes

All Groups Filter

An LDAP search filter for finding all groups beneath the base group distinguished name (DN). If the attribute is not specified (that is, if the attribute is null or empty), a default search filter is created based on the Group schema.

Attribute: AllGroupsFilter

Readable: yes

Static Group Object Class

The name of the LDAP object class that stores static groups.

Attribute: StaticGroupObjectClass

Default: "groupofnames"

Readable: yes

Static Group Name Attribute

The attribute of a static LDAP group object that specifies the name of the group.

Attribute: StaticGroupNameAttribute

Default: "cn"

Readable: yes