Class LDAPUserGroupCallbackImpl

  • All Implemented Interfaces:
    org.kie.api.task.UserGroupCallback

    public class LDAPUserGroupCallbackImpl
    extends AbstractUserGroupInfo
    implements org.kie.api.task.UserGroupCallback
    LDAP integration for Task Service to collect user and role/group information.

    Following is a list of all supported properties:

    • ldap.bind.user (optional if LDAP server accepts anonymous access)
    • ldap.bind.pwd (optional if LDAP server accepts anonymous access
    • ldap.user.ctx (mandatory)
    • ldap.role.ctx (mandatory)
    • ldap.user.roles.ctx (optional, if not given ldap.role.ctx will be used)
    • ldap.user.filter (mandatory)
    • ldap.role.filter (mandatory)
    • ldap.user.roles.filter (mandatory)
    • ldap.user.attr.id (optional, if not given 'uid' will be used)
    • ldap.roles.attr.id (optional, if not given 'cn' will be used)
    • ldap.user.id.dn (optional, is user id a DN, instructs the callback to query for user DN before searching for roles, default false)
    • ldap.search.scope (optional, if not given 'ONELEVEL_SCOPE' will be used) possible values are: OBJECT_SCOPE, ONELEVEL_SCOPE, SUBTREE_SCOPE
    • ldap.name.escape (optional, instructs to escape - illegal character in user/group name before the query - currently escapes only comma) by default is set to true
    • java.naming.factory.initial
    • java.naming.security.authentication
    • java.naming.security.protocol
    • java.naming.provider.url