templates/ldap.config.j2

{#
SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
SPDX-License-Identifier: Apache-2.0
#}

{
{% if ldap_id is defined %}
   "id": "{{ ldap_id}}",
{% endif %}
   "name":"ldap",
   "providerId":"ldap",
   "providerType":"org.keycloak.storage.UserStorageProvider",
   "parentId":"master",
   "config":{
      "enabled":[
         "true"
      ],
      "priority":[
         "0"
      ],
      "fullSyncPeriod":[
         "-1"
      ],
      "changedSyncPeriod":[
         "-1"
      ],
      "cachePolicy":[
         "DEFAULT"
      ],
      "evictionDay":[
      ],
      "evictionHour":[
      ],
      "evictionMinute":[
      ],
      "maxLifespan":[
      ],
      "batchSizeForSync":[
         "1000"
      ],
      "editMode":[
         "WRITABLE"
      ],
      "importEnabled":[
         "true"
      ],
      "syncRegistrations":[
         "{{ keycloak_ldap_sync_registration }}"
      ],
      "vendor":[
         "{{ keycloak_ldap_vendor }}"
      ],
      "usePasswordModifyExtendedOp":[
      ],
      "usernameLDAPAttribute":[
         "{{ keycloak_ldap_username }}"
      ],
      "rdnLDAPAttribute":[
         "{{ keycloak_ldap_rdn }}"
      ],
      "uuidLDAPAttribute":[
         "{{ keycloak_ldap_uuid }}"
      ],
      "userObjectClasses":[
         "{{ keyclaok_ldap_user_object }}"
      ],
      "connectionUrl":[
         "{{ keycloak_ldap_server }}"
      ],
      "usersDn":[
         "{{ keycloak_ldap_userdn }}"
      ],
      "authType":[
         "simple"
      ],
      "startTls":[
      ],
      "bindDn":[
         "{{ keycloak_ldap_admin_dn }}"
      ],
      "bindCredential":[
         "{{ keycloak_ldap_admin_password }}"
      ],
      "customUserSearchFilter":[
      ],
      "searchScope":[
         "1"
      ],
      "validatePasswordPolicy":[
         "false"
      ],
      "trustEmail":[
         "false"
      ],
      "useTruststoreSpi":[
         "ldapsOnly"
      ],
      "connectionPooling":[
         "true"
      ],
      "connectionPoolingAuthentication":[
      ],
      "connectionPoolingDebug":[
      ],
      "connectionPoolingInitSize":[
      ],
      "connectionPoolingMaxSize":[
      ],
      "connectionPoolingPrefSize":[
      ],
      "connectionPoolingProtocol":[
      ],
      "connectionPoolingTimeout":[
      ],
      "connectionTimeout":[
      ],
      "readTimeout":[
      ],
      "pagination":[
         "true"
      ],
      "allowKerberosAuthentication":[
         "false"
      ],
      "serverPrincipal":[
      ],
      "keyTab":[
      ],
      "kerberosRealm":[
      ],
      "debug":[
         "false"
      ],
      "useKerberosForPasswordAuthentication":[
         "false"
      ]
   }
}