Identity Mapper

Note: this is an abstract component, that cannot be instantiated.

Identity Mappers are responsible for establishing a mapping between an identifier string provided by a client, and the entry for the user that corresponds to that identifier. Identity Mappers are used to process several SASL mechanisms to map an authorization ID (e.g., a Kerberos principal when using GSSAPI) to a directory user. They are also used when processing requests with the proxied authorization control.

Direct Subcomponents

The following Identity Mappers are available in the server :

• Exact Match Identity Mapper
• Regular Expression Identity Mapper

These Identity Mappers inherit from the properties described below.

Relations To this Component

The following components have a direct AGGREGATION relation TO Identity Mappers :

• Cram MD5 SASL Mechanism Handler

• Digest MD5 SASL Mechanism Handler

• Global Configuration

• GSSAPI SASL Mechanism Handler

• Password Modify Extended Operation Handler

• Plain SASL Mechanism Handler

This page describes the Identity Mapper:

• Properties
• LDAP Mapping

Properties

A description of each property follows.

Basic Properties

enabled

java-class

LDAP Mapping

Each configuration property can be mapped to a specific LDAP attribute under the "cn=config" entry. The mappings that follow are provided for information only. In general, you should avoid changing the server configuration by manipulating the LDAP attributes directly.