Local LDAP configuration files

Last Updated : May 12, 2021 |

The configuration files allow you to control the local LDAP database. All configuration files contain parameters as name-value pairs in the following format: name=value. For example, cn=common name.

Name

Description

defaultuservalues.properties

Contains the default user properties that you can modify.

Do not re-initialize the User Management database if the file is being edited.

attributesmap.properties

Maps the default user attribute names to readable display names. For example, the file maps the attribute named "uid" to "User ID".

Do not re-initialize the User Management database if this file is being edited.

attributeacl.properties

Configures the Access Control List (ACL) attribute level enforced by the User Management database.

sdbdistributor.properties

Supports synchronization of the User Management database with the TSAPI security database. You can configure the security database distributor by editing this file.

genericldap1.properties genericldap2.properties replicator1.properties

Contains LDAP information. The genericldap1.properties and genericldap2.properties files contain two examples of configuring an LDAP distributor that you can use as models for post-installation configuration. You can modify these files unless an LDAP distributor with the same name is configured in the user.properties file.

When you modify the configuration file of a running LDAP distributor, the changes will not take effect until you re-initialize the User Management database.

rbac.properties

Maps the User Management database operation names to a list of roles that give access to the specified operation. You must not modify this file.

ldapfilter.properties

Configures the LDAP authentication filter. When the User Management database receives an operation request, the service validates the caller credentials configured in this file. The settings in this file should reflect User Management database authentication mode. For example, if the User Management database is running with remote authentication, you must set the ldapfilter.properties settings to the same remote LDAP service.

log4j.properties

Configures logging for the User Management database using the log4j logging utility.

remoteldapauthenticator.properties

Specifies the location of the remote LDAP service if the User Management database is running with remote authentication.

user.properties

Displays the main configuration parameters for the User Management database. The configuration in the user.properties file controls the following settings:

  • Primary LDAP interface

  • Distributor

  • Logging

  • Supported attributes and their types

  • The definition of the users protected from deletion during the synchronization process

  • Security

  • Advertising internal user roles

ws_cus_bootstrap.properties

Contains essential bootstrap parameters for the service.

If you modify the file, you must copy it to the TOMCAT_HOME/webapps/axis/WEB-INF folder.