Skip to content

Fortified IDDocs

Module parameters

This section includes the main parameters for the ADResetClient module.

NameDescriptionDefaultMandatory
nameDestination name. Unique identifier for a specific configuration/connection/service. This value must be unique for all ldapclient configurations."default"
instancesNumber of instances to deploy.1
connectionLDAP connection configuration

The host, service-account credentials, and truststore are installation-specific. The example uses placeholder credentials and assumes the JVM trusts the domain controller's CA chain. If it does not, configure ssl_truststore_path, ssl_truststore_password, and ssl_truststore_type instead of disabling certificate validation.

NameDescriptionDefaultMandatory
hostHostname or IP address to LDAP directory service.
portListening port of LDAP directory service.
bind_dnDN of user/account used to connect to LDAP service.
bind_passwordPassword of user/account used to connect to LDAP service.
connect_timeout_msSpecifies the maximum length of time in milliseconds that a connection attempt should be allowed to continue before giving up. A value of zero indicates that there should be no connect timeout.10000
response_timeout_msSpecifies the maximum length of time in milliseconds that an operation should be allowed to block while waiting for a response from the server. A value of zero indicates that there should be no timeout.2000
abandon_on_timeoutSpecifies whether the LDAP client should attempt to abandon any request for which no response is received in the maximum response timeout period.true
follow_referralsSpecifies whether associated connections should attempt to follow any referrals that they encounter, using the referral connector for the associated connection.false
use_keep_aliveSpecifies whether to use the SO_KEEPALIVE option for the underlying sockets used by associated connections.false
use_lingerSpecifies whether to use the SO_LINGER option for the underlying sockets used by associated connections.false
linger_timeout_secsSO_LINGER timeout in seconds.30
use_schemaSpecifies whether to try to use schema information when reading data from the server (e.g., to select the appropriate matching rules for the attributes included in a search result entry). true
use_sslSpecifies whether SSL/TLS should be used.true
ssl_trust_allTurns on/off trust validation for SSL/TLS connections. false
ssl_truststore_pathPath to custom SSL truststore. If not specified, the default Java truststore will be used.
ssl_truststore_passwordCustom truststore password.
ssl_truststore_typeType of a custom file-based truststore.JKS
ssl_truststore_validate_timeTurns on/off peer certificate validity check.true