Identity Mapper

This is an abstract object type that cannot be instantiated.

Identity Mappers are responsible for establishing a mapping between an identifier string provided by a client, and the entry for the user that corresponds to that identifier. Identity Mappers are used to process several SASL mechanisms to map an authorization ID (e.g., a Kerberos principal when using GSSAPI) to a directory user. They are also used when processing requests with the proxied authorization control.

Identity Mappers

The following Identity Mappers are available:

These Identity Mappers inherit the properties described below.

Dependencies

The following objects depend on Identity Mappers:

Properties

Use the --advanced option to access advanced properties.

Basic Properties

Advanced Properties

  • None

Basic Properties

enabled

SynopsisIndicates whether the Identity Mapper is enabled for use.
Default ValueNone
Allowed Valuestrue
false
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

java-class

SynopsisSpecifies the fully-qualified name of the Java class that provides the Identity Mapper implementation.
Default ValueNone
Allowed ValuesA Java class that extends or implements:
org.opends.server.api.IdentityMapper
Multi-valuedNo
RequiredYes
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo