Configuring The LDAP Identity Provider

The LDAP Identity Provider is used to define how users are retrieved from the LDAP server.

It can be found in the management console under the Apache Jackrabbit Oak LDAP Identity Provider name.

The following configuration options are available for the LDAP Identity Provider:

LDAP Provider Name
Name of this LDAP provider configuration.
LDAP Server Hostname
Hostname of the LDAP server
LDAP Server Port
Port of the LDAP server
Use SSL
Indicates if an SSL (LDAPs) connection should be used.
Use TLS
Indicates if TLS should be started on connections.
Disable certificate checking
Indicates if server certificate validation should be disabled.
Bind DN
DN of the user for authentication. If this field is left empty, an anonymous bind is performed.
Bind Password
Password of the user for authentication
Search timeout
Time until a search times out
Admin pool max active
The maximum active size of the admin connection pool.
User pool max active
The maximum active size of the user connection pool.
User base DN
The DN for user searches
User object classes
The list of object classes that a user entry must contain.
User id attribute
Name of the attribute that contains the user id.
User extra filter
Extra LDAP filter to use when searching for users. The final filter is formatted like: '(&(<idAttr>=<userId>)(objectclass=<objectclass>)<extraFilter>)' (user.extraFilter)
User DN paths
Controls if the DN should be used for calculating a portion of the intermediate path.
Group base DN
The base DN for group searches.
Group object classes
The list of object classes a group entry must contain.
Group name attribute
Name of the attribute that contains the group name.
Group extra filter
Extra LDAP filter to use when searching for groups. The final filter isformatted like: '(&(<nameAttr>=<groupName>)(objectclass=<objectclass>)<extraFilter>)'
Group DN paths
Controls if the DN should be used for calculating a portion of the intermediate path.
Group member attribute
Group attribute that contains one or more members of a group.