| | |
| | | // LDAP search using a filter constructed by |
| | | // substituting the username into the |
| | | // "searchFilterTemplate" using %s substitution. |
| | | "method" : "simple", |
| | | "method" : "search-simple", |
| | | |
| | | // The connection factory which will be exclusively used for |
| | | // authenticating users using LDAP bind operations. |
| | | "bindLDAPConnectionFactory" : "default", |
| | | |
| | | // The SASL AuthzID template which will be used for "sasl-plain" |
| | | // authentication. |
| | | // authentication. The %s format parameters will be substituted with |
| | | // the client-provided username, using DN character escaping for DN |
| | | // AuthzIDs. |
| | | "saslAuthzIdTemplate" : "dn:uid=%s,ou=people,dc=example,dc=com", |
| | | |
| | | // The connection factory which will be used for performing LDAP |
| | |
| | | // enabled. |
| | | "searchLDAPConnectionFactory" : "root", |
| | | |
| | | // The search parameters to use for "search-simple" authentication. |
| | | // The search parameters to use for "search-simple" authentication. The |
| | | // %s filter format parameters will be substituted with the |
| | | // client-provided username, using LDAP filter string character escaping. |
| | | "searchBaseDN" : "ou=people,dc=example,dc=com", |
| | | "searchScope" : "sub", // Or "one". |
| | | "searchFilterTemplate" : "(&(objectClass=inetOrgPerson)(uid=%s))" |