Package com.ibm.security.access.user

Class LDAPProperties

java.lang.Object

com.ibm.security.access.user.LDAPProperties

public class LDAPProperties
extends Object

This class contains the LDAP Properties which can be overriden using the Properties map exposed in several init methods. All values of should be Strings.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	allowQoutePattern
static final String	authnTimeout	Set the maximum time that Verify Identity Access will wait for a response to an authentication request.
static final String	authUsingCompare	Validate user password's using LDAP compare.
static final String	authUsingRebind	Authenticate users using rebind
static final String	basicGroupIdAttribute	LDAP attribute to use for group membership
static final String	basicUserNoDuplicates	Specify whether duplicate users (identified by principal attribute) are allowed.
static final String	basicUserPrincipalAdd
static final String	basicUserPrincipalAttribute	LDAP attribute to use as a unique identifier for Basic users.
static final String	basicUserPwdPolicy
static final String	basicUserSearchSuffix	LDAP suffixes which contain Basic Users.
static final String	basicUserSuffixOptimizer	Enable search suffix optimization.
static final String	basicUserSupport	Enable basic user support.
static final String	bindAuthPwdChange	Enforce a password change when using bind authentication.
static final String	bindDn	Bind Dn to connect to LDAP User Registry
static final String	cachePolicyExpireTime
static final String	cacheResetStrikes
static final String	cipherSuites	Set the list of allowed cipher suites to use for SSL/TLS connections
static final String	clientCertLabel	Set the client certificate to use for TLS connection the LDAP User Registry.
static final String	compliance
static final String	connectionInactivity	Set the maximum allowed connection inactivity.
static final String	defaultPolicyOverrideSupport
static final String	dynamicGroupsEnabled	Enable dynamic group support.
static final String	enableLastLogin	Record the last password authentication timestamp using a LDAP attribute
static final String	enhancedPwdPolicy
static final String	fips
static final String	fipsCertified
static final String	groupAttributeNames
static final String	groupMaxLifespan
static final String	groupMaxSize
static final String	groupSearchFilter	Set the filter to use when searching for Groups.
static final String	ignoreEmptyPasswordOnNativeCreate	Allow the creation of native LDAP users ithout setting a password
static final String	ignoreIfDown	Ignore LDAP Server if Verify Identity Access cannot get a response.
static final String	ignoreSuffix	LDAP suffixes to ignore
static final String	importModUid
static final String	isMemberOfAttribute
static final String	lastLoginAttribute	Specify a custom native user attribute to record the last logn time.
static final String	lateLockoutNotification	Specify if the user should be told an authentication request failed because of Time Of Day access policy.
static final String	loginFailurePersistent	Enable caching of failed password attempts using LDAP attribute.
static final String	loginFailurePersistentAttribute	Specify a native LDAP attribute to store failed password attempts.
static final String	maxAuthnConnections	Set the maximum number of connections to the LDAP User Registry for authentication requests
static final String	maxSearchSize	Set the maximum number of search results to return.
static final String	mgmtDomainSuffix
static final String	novellSuffixSearchEnabled
static final String	passwordAttribute	Specify the LDAP attribute to use as the password
static final String	persistentStrikeExpireTIme	Specify the length of time before the password fail count is reset
static final String	racfSuffix
static final String	requireNativeGroup
static final String	returnRegistryId
static final String	searchPageSize	Limit the page size returned by LDAP searches.
static final String	searchTimeout	Set the maximum time that Verify Identity Access will wait for a response to a search request.
static final String	sslKeystore	Set the SSL keystore to use for TLS connections to LDAP User Registry.
static final String	sslKeystorePwd	Set the password to use for the SSL Keystore.
static final String	sslTruststore	Set the SSL Truststore to use for TLS connections.
static final String	sslTruststorePwd	Set the password to use for the SSL Truststore
static final String	sslV3enable	Enable the SSLv3 Protocol
static final String	staticGroupObjectclass
static final String	suffixMaxIterations
static final String	suffixOrdering	Order which known suffixes will be searched
static final String	suffixTriggerCount
static final String	timeout	Set the maximum time that Verify Identity Access will wait for a response to a request.
static final String	tlsV10Enable	Enable the TLSv1.0 Protocol
static final String	tlsV11Enable	Enable the TLSv1.1 Protocol
static final String	tlsV12Enable	Enable the TLSv1.2 Protocol
static final String	userObjectclass
static final String	userSearchFilter	Set the filter to use when searching for all users (Native and Basic).
static final String	userSelfcareObjectclass

Constructor Summary

Constructors

Constructor	Description
LDAPProperties()

Method Summary

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

bindDn

public static final String bindDn

Bind Dn to connect to LDAP User Registry

See Also:

• Constant Field Values

novellSuffixSearchEnabled

public static final String novellSuffixSearchEnabled

See Also:

• Constant Field Values

ignoreSuffix

public static final String ignoreSuffix

LDAP suffixes to ignore

See Also:

• Constant Field Values

suffixTriggerCount

public static final String suffixTriggerCount

See Also:

• Constant Field Values

suffixMaxIterations

public static final String suffixMaxIterations

See Also:

• Constant Field Values

suffixOrdering

public static final String suffixOrdering

Order which known suffixes will be searched

See Also:

• Constant Field Values

basicUserSearchSuffix

public static final String basicUserSearchSuffix

LDAP suffixes which contain Basic Users.

See Also:

• Constant Field Values

basicUserSuffixOptimizer

public static final String basicUserSuffixOptimizer

Enable search suffix optimization.

See Also:

• Constant Field Values

sslKeystore

public static final String sslKeystore

Set the SSL keystore to use for TLS connections to LDAP User Registry.

See Also:

• Constant Field Values

clientCertLabel

public static final String clientCertLabel

Set the client certificate to use for TLS connection the LDAP User Registry.

See Also:

• Constant Field Values

sslKeystorePwd

public static final String sslKeystorePwd

Set the password to use for the SSL Keystore.

See Also:

• Constant Field Values

sslTruststore

public static final String sslTruststore

Set the SSL Truststore to use for TLS connections.

See Also:

• Constant Field Values

sslTruststorePwd

public static final String sslTruststorePwd

Set the password to use for the SSL Truststore

See Also:

• Constant Field Values

connectionInactivity

public static final String connectionInactivity

Set the maximum allowed connection inactivity.

See Also:

• Constant Field Values

maxSearchSize

public static final String maxSearchSize

Set the maximum number of search results to return.

See Also:

• Constant Field Values

timeout

public static final String timeout

Set the maximum time that Verify Identity Access will wait for a response to a request.

See Also:

• Constant Field Values

authnTimeout

public static final String authnTimeout

Set the maximum time that Verify Identity Access will wait for a response to an authentication request.

See Also:

• Constant Field Values

searchTimeout

public static final String searchTimeout

Set the maximum time that Verify Identity Access will wait for a response to a search request.

See Also:

• Constant Field Values

enhancedPwdPolicy

public static final String enhancedPwdPolicy

See Also:

• Constant Field Values

maxAuthnConnections

public static final String maxAuthnConnections

Set the maximum number of connections to the LDAP User Registry for authentication requests

See Also:

• Constant Field Values

fips

public static final String fips

See Also:

• Constant Field Values

compliance

public static final String compliance

See Also:

• Constant Field Values

sslV3enable

public static final String sslV3enable

Enable the SSLv3 Protocol

See Also:

• Constant Field Values

tlsV10Enable

public static final String tlsV10Enable

Enable the TLSv1.0 Protocol

See Also:

• Constant Field Values

tlsV11Enable

public static final String tlsV11Enable

Enable the TLSv1.1 Protocol

See Also:

• Constant Field Values

tlsV12Enable

public static final String tlsV12Enable

Enable the TLSv1.2 Protocol

See Also:

• Constant Field Values

cipherSuites

public static final String cipherSuites

Set the list of allowed cipher suites to use for SSL/TLS connections

See Also:

• Constant Field Values

fipsCertified

public static final String fipsCertified

See Also:

• Constant Field Values

userSearchFilter

public static final String userSearchFilter

Set the filter to use when searching for all users (Native and Basic).

See Also:

• Constant Field Values

userObjectclass

public static final String userObjectclass

See Also:

• Constant Field Values

isMemberOfAttribute

public static final String isMemberOfAttribute

See Also:

• Constant Field Values

groupSearchFilter

public static final String groupSearchFilter

Set the filter to use when searching for Groups.

See Also:

• Constant Field Values

staticGroupObjectclass

public static final String staticGroupObjectclass

See Also:

• Constant Field Values

dynamicGroupsEnabled

public static final String dynamicGroupsEnabled

Enable dynamic group support.

See Also:

• Constant Field Values

bindAuthPwdChange

public static final String bindAuthPwdChange

Enforce a password change when using bind authentication.

See Also:

• Constant Field Values

authUsingRebind

public static final String authUsingRebind

Authenticate users using rebind

See Also:

• Constant Field Values

searchPageSize

public static final String searchPageSize

Limit the page size returned by LDAP searches.

See Also:

• Constant Field Values

basicUserPrincipalAttribute

public static final String basicUserPrincipalAttribute

LDAP attribute to use as a unique identifier for Basic users.

See Also:

• Constant Field Values

basicUserPrincipalAdd

public static final String basicUserPrincipalAdd

See Also:

• Constant Field Values

basicGroupIdAttribute

public static final String basicGroupIdAttribute

LDAP attribute to use for group membership

See Also:

• Constant Field Values

ignoreIfDown

public static final String ignoreIfDown

Ignore LDAP Server if Verify Identity Access cannot get a response.

See Also:

• Constant Field Values

ignoreEmptyPasswordOnNativeCreate

public static final String ignoreEmptyPasswordOnNativeCreate

Allow the creation of native LDAP users ithout setting a password

See Also:

• Constant Field Values

passwordAttribute

public static final String passwordAttribute

Specify the LDAP attribute to use as the password

See Also:

• Constant Field Values

racfSuffix

public static final String racfSuffix

See Also:

• Constant Field Values

mgmtDomainSuffix

public static final String mgmtDomainSuffix

See Also:

• Constant Field Values

allowQoutePattern

public static final String allowQoutePattern

See Also:

• Constant Field Values

returnRegistryId

public static final String returnRegistryId

See Also:

• Constant Field Values

userSelfcareObjectclass

public static final String userSelfcareObjectclass

See Also:

• Constant Field Values

authUsingCompare

public static final String authUsingCompare

Validate user password's using LDAP compare.

See Also:

• Constant Field Values

enableLastLogin

public static final String enableLastLogin

Record the last password authentication timestamp using a LDAP attribute

See Also:

• Constant Field Values

lastLoginAttribute

public static final String lastLoginAttribute

Specify a custom native user attribute to record the last logn time.

See Also:

• Constant Field Values

basicUserSupport

public static final String basicUserSupport

Enable basic user support.

See Also:

• Constant Field Values

basicUserNoDuplicates

public static final String basicUserNoDuplicates

Specify whether duplicate users (identified by principal attribute) are allowed.

See Also:

• Constant Field Values

importModUid

public static final String importModUid

See Also:

• Constant Field Values

groupAttributeNames

public static final String groupAttributeNames

See Also:

• Constant Field Values

groupMaxSize

public static final String groupMaxSize

See Also:

• Constant Field Values

groupMaxLifespan

public static final String groupMaxLifespan

See Also:

• Constant Field Values

requireNativeGroup

public static final String requireNativeGroup

See Also:

• Constant Field Values

defaultPolicyOverrideSupport

public static final String defaultPolicyOverrideSupport

See Also:

• Constant Field Values

loginFailurePersistent

public static final String loginFailurePersistent

Enable caching of failed password attempts using LDAP attribute.

See Also:

• Constant Field Values

loginFailurePersistentAttribute

public static final String loginFailurePersistentAttribute

Specify a native LDAP attribute to store failed password attempts.

See Also:

• Constant Field Values

persistentStrikeExpireTIme

public static final String persistentStrikeExpireTIme

Specify the length of time before the password fail count is reset

See Also:

• Constant Field Values

lateLockoutNotification

public static final String lateLockoutNotification

Specify if the user should be told an authentication request failed because of Time Of Day access policy.

See Also:

• Constant Field Values

cachePolicyExpireTime

public static final String cachePolicyExpireTime

See Also:

• Constant Field Values

basicUserPwdPolicy

public static final String basicUserPwdPolicy

See Also:

• Constant Field Values

cacheResetStrikes

public static final String cacheResetStrikes

See Also:

• Constant Field Values

Constructor Details

LDAPProperties

public LDAPProperties()