-
accountControlEvaluator
AccountControlEvaluatorProperty accountControlEvaluator
The account control evaluator.
-
defaultRoles
List<String> defaultRoles
The default roles.
-
emailAttribute
String emailAttribute
The email attribute of the user. Default is 'mail';
-
firstNameAttribute
String firstNameAttribute
The first name attribute of the user. Default is 'givenName'.
-
groupBaseDn
String groupBaseDn
The group base dn (like 'ou=groups,dc=example,dc=org'). It's only required, if
groupFetchStrategy is set to GROUP_CONTAINS_USERS.
-
groupFetchStrategy
LdaptiveAuthenticationProperties.GroupFetchStrategy groupFetchStrategy
The group fetch strategy.
-
groupIdAttribute
String groupIdAttribute
The group id attribute. It's only required, if groupFetchStrategy is set to
GROUP_CONTAINS_USERS
-
groupMemberAttribute
String groupMemberAttribute
The group member attribute. It's only required, if groupFetchStrategy is set to
GROUP_CONTAINS_USERS
-
groupMemberFormat
String groupMemberFormat
The group member format. It's only required, if groupFetchStrategy is set to
GROUP_CONTAINS_USERS
-
groupObjectClass
String groupObjectClass
The group object class. It's only required, if groupFetchStrategy is set to
GROUP_CONTAINS_USERS
-
groupSearchScope
org.ldaptive.SearchScope groupSearchScope
The group search scope. It's only required, if groupFetchStrategy is set to
GROUP_CONTAINS_USERS,
-
lastNameAttribute
String lastNameAttribute
The last name attribute of the user. Default is 'sn'.
-
memberAttribute
String memberAttribute
The member attribute.
-
passwordAttribute
String passwordAttribute
The password attribute of the user (like 'userPassword'). If it is empty, a simple user bind
will be done with the credentials of the user for authentication. If it is present, the
connection to the ldap server must be done by a 'global' user and a password encoder that fits
your requirements must be present. The default password encoder only supports SHA, that is
insecure.
-
passwordLastSetAttribute
String passwordLastSetAttribute
The password last set attribute (like 'pwdLastSet') can be used to activate the remember-me
functionality.
-
refusedUsernames
List<String> refusedUsernames
A list with refused usernames.
-
roleCaseTransformation
org.bremersee.spring.security.core.authority.mapping.CaseTransformation roleCaseTransformation
The role case transformation.
-
roleMapping
List<LdaptiveAuthenticationProperties.RoleMapping> roleMapping
The role mappings.
-
rolePrefix
String rolePrefix
The role prefix (like 'ROLE_').
-
roleStringReplacements
List<LdaptiveAuthenticationProperties.StringReplacement> roleStringReplacements
The string replacements for roles.
-
userBaseDn
String userBaseDn
The user base dn (like 'ou=people,dc=example,dc=org'). This value is always required.
-
userFindOneFilter
String userFindOneFilter
The filter to find the user. If it is empty, it will be generated from userObjectClass
and usernameAttribute like this (&(objectClass=inetOrgPerson)(uid={0})).
-
userFindOneSearchScope
org.ldaptive.SearchScope userFindOneSearchScope
The scope to find a user. Default is 'one level'.
-
usernameAttribute
String usernameAttribute
The username attribute of the user (like 'uid' or 'sAMAccountName'). The selected template
contains a default.
-
usernameToBindDnConverter
UsernameToBindDnConverterProperty usernameToBindDnConverter
The username (like 'anna') to bind dn (like 'cn=anna,ou=people,dc=example,dc=org') converter.
-
userObjectClass
String userObjectClass
The object class of the user (like 'inetOrgPerson'). The selected template contains a default.
-
userRdnAttribute
String userRdnAttribute
Applies only for simple bind. The rdn attribute of the user. This is normally the same as the
username attribute.