Table of Contents
Advertisement
Schema (Continued)
Name
UserName
Password
AuthenticationMechanism
GroupSearchBase
IsGroupSearchBaseEnabled
ConnectorType
UserAttributes
GroupAttributes
AuthenticationMechanism
The AuthenticationMechanism element defines the authentication mechanism used by the LDAP service.
Table
11‐2 shows permitted values for element content and the results they produce.
Table 11-2. AuthenticationMechanism Element Values
Value
SIMPLE
KERBEROS
MD5DIGEST
NTLM
ConnectorType
The ConnectorType element defines the type of an LDAP service. Table
element content and the results they produce.
Table 11-3. ConnectorType Element Values
Value
ACTIVE_DIRECTORY
OPEN_LDAP
VMware, Inc.
Min
Max
Type
0
1
xs:string
0
1
xs:string
1
1
LdapAuthentication
MechanismType
0
1
xs:string
1
1
xs:boolean
1
1
LdapConnectorType
1
1
OrgLdapUserAttributesType
1
1
OrgLdapGroupAttributesType
Result
LDAP connection uses simple authentication as specified in RFC 2251 and RFC 2829.
LDAP connection uses Kerberos authentication.
LDAP connection uses Digest‐MD5 authentication as specified in RFC 2831.
LDAP connection uses Windows NTLM authentication.
Result
LDAP service is provided by Windows Active Directory
LDAP service is provided by OpenLDAP (see
Chapter 11 Administrative API Reference
Description
Username to use when logging in to
LDAP, specified using LDAP
attribute=value pairs (for example:
cn="ldap-admin", dc="example",
dc="com")
Password for the user identified by
UserName. This value is never
returned by GET. It is inspected on
create and modify. On modify, the
absence of this element indicates that
the password should not be changed.
Defines the authentication mechanism
used by the LDAP service
LDAP group search base
True if the group search base is enabled
Defines the type of the LDAP service
Defines how LDAP attributes are used
when importing a user
Defines how LDAP attributes are used
when importing a group
11‐3 shows permitted values for
http://www.openldap.org).
183
Advertisement
Table of Contents
