Table 0-12
Attribute Label
|
Description
|
Value Constraints
|
Group Base DN
|
The base distinguished name (DN) of the tree in the LDAP directory that contains groups.
MBean: weblogic.security. providers.authentication. OpenLDAPAuthenticatorMBean
Attribute: GroupBaseDN
|
Default: "ou=groups, dc=example, dc=com"
|
Group Search Scope
|
Specifies how deep in the LDAP directory tree to search for groups. Valid values are subtree and onelevel.
MBean: weblogic.security. providers.authentication. OpenLDAPAuthenticatorMBean
Attribute: GroupSearchScope
|
Default: "subtree"
|
Group From Name Filter
|
An LDAP search filter for finding a group given the name of the group. If the attribute is not specified (that is, if the attribute is null or empty), a default search filter is created based on the group schema.
MBean: weblogic.security. providers.authentication. OpenLDAPAuthenticatorMBean
Attribute: GroupFromNameFilter
|
Default: "(&(cn=%g)(objectclass=groupofnames))"
|
All Groups Filter
|
An LDAP search filter for finding all groups beneath the base group distinguished name (DN). If the attribute is not specified (that is, if the attribute is null or empty), a default search filter is created based on the Group schema.
MBean: weblogic.security. providers.authentication. OpenLDAPAuthenticatorMBean
Attribute: AllGroupsFilter
|
|
Static Group Object Class
|
The name of the LDAP object class that stores static groups.
MBean: weblogic.security. providers.authentication. OpenLDAPAuthenticatorMBean
Attribute: StaticGroupObjectClass
|
Default: "groupofuniquenames"
|
Static Group Name Attribute
|
The attribute of a static LDAP group object that specifies the name of the group.
MBean: weblogic.security. providers.authentication. OpenLDAPAuthenticatorMBean
Attribute: StaticGroupNameAttribute
|
Default: "cn"
|