WildFly Full 24 Model Reference

  1. home
  2. core-service=management
  3. security-realm
  4. authorization=ldap
  5. group-search=group-to-principal
Deprecated Since 1.7.0
The security-realm configuration is deprecated and may be removed or moved in future versions.

A group search where the group entry contains an attribute referencing it's members.

Children (1)

  • cache A cache for previous group to previous group-to-principal search results.
    • by-access-time A cache to hold the results of previous LDAP interactions.
    • by-search-time A cache to hold the results of previous LDAP interactions.

Attributes (9)

  • base-dn The starting point of the search for the group.
    • Attribute Value
    Type STRING
    Nillable false
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • group-dn-attribute Which attribute on a group entry is it's distinguished name.
    • Attribute Value
    Default Value dn
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • group-name An enumeration to identify if groups should be referenced using a simple name or their distinguished name.
    • Attribute Value
    Default Value SIMPLE
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
    Allowed Values DISTINGUISHED_NAME
    SIMPLE
  • group-name-attribute Which attribute on a group entry is it's simple name.
    • Attribute Value
    Default Value uid
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • iterative Should further searches be performed to identify groups that the groups identified are a member of?
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • prefer-original-connection After following a referral should subsequent searches prefer the original connection or use the connection of the last referral.
    • Attribute Value
    Default Value true
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • principal-attribute The attribute on the group entry that references the principal.
    • Attribute Value
    Default Value member
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • recursive Should levels below the starting point be recursively searched?
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
  • search-by Should searches be performed using simple names or distinguished names?
    • Attribute Value
    Default Value DISTINGUISHED_NAME
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
    Allowed Values DISTINGUISHED_NAME
    SIMPLE

Operations (2)

  • add Add the group to principal mapping
    Request Parameter Type Required Expressions Allowed Default value Description
    base-dn STRING true true The starting point of the search for the group.
    group-dn-attribute STRING false true dn Which attribute on a group entry is it's distinguished name.
    group-name STRING false true SIMPLE An enumeration to identify if groups should be referenced using a simple name or their distinguished name.
    group-name-attribute STRING false true uid Which attribute on a group entry is it's simple name.
    iterative BOOLEAN false true false Should further searches be performed to identify groups that the groups identified are a member of?
    prefer-original-connection BOOLEAN false true true After following a referral should subsequent searches prefer the original connection or use the connection of the last referral.
    principal-attribute STRING false true member The attribute on the group entry that references the principal.
    recursive BOOLEAN false true false Should levels below the starting point be recursively searched?
    search-by STRING false true DISTINGUISHED_NAME Should searches be performed using simple names or distinguished names?
  • remove Remove the group to principal mapping