[server:<instance>] stanza

This stanza defines a back-end LDAP server that can be used for federated registries.

All operations to specific branches of the LDAP DIT can be passed through to this back-end server.

You can use multiple instances of this stanza.

[ldap] configuration entries that are not configurable in this stanza use the [ldap] stanza values. For example, "tls-v12-enable".

For Active Directory back-end, you must use an SSL connection (ssl-enabled = yes, port = 636).

bind-auth-and-pwdchg
Use the bind-auth-and-pwdchg stanza entry to control whether to force authentication to use the LDAP bind operation and force password change.
bind-dn
Use the bind-dn stanza entry to define the LDAP user distinguished name (DN) that is used for signing on to the LDAP server.
bind-pwd
Use the bind-pwd stanza entry to define password for the distinguished name declared in the bind-dn stanza entry.
dn-map
Use the dn-map stanza entry to define which areas of the Security Access Manager registry have copies of users from this back-end server.
dynamic-groups-enabled
Use the dynamic-groups-enabled stanza entry to control whether dynamic groups are supported.
group-search-filter
Use the group-search-filter entry to specify the LDAP search filter that is used by Security Access Manager.
host
Use the host stanza entry to define the host name of the LDAP server.
ignore-if-down
Set whether Security Access Manager continues to operate with the other federated registries if one of the registries become unavailable.
max-server-connections
Use the max-server-connections stanza entry to define the maximum number of connections that are allowed with the LDAP server.
password-attribute
Use this stanza entry to specify the attribute used to set or change passwords.
port
Use the port stanza entry to define the port appropriate for the ssl-enabled value set in this stanza.
pwd-chg-method
This options is used to override the automatically used low level LDAP operations for changing account passwords.
racf-suffix
Use this stanza entry to set whether to treat all suffixes under the server:<instance> stanza as RACF suffixes.
replica
Use the replica stanza entry to define the LDAP user registry replicas.
static-group-objectclass
Use the static-group-objectclass stanza entry to define the static group object class names to set when you create a native group entry in LDAP.
ssl-enabled
Use the ssl-enabled stanza entry to enable or disable SSL communication between WebSEAL and the LDAP server.
ssl-keyfile-dn
Use the ssl-keyfile-dn stanza entry to define the key label of the client personal certificate within the SSL key file.
suffix
Use the suffix stanza entry to define federated registry suffixes.
user-objectclass
Use the user-objectclass stanza entry to define the object class names to set when you create a native user entry in LDAP.
user-search-filter
Use the user-search-filter entry to specify the LDAP search filter that is used by Security Access Manager.

Parent topic: Stanza reference