DS 7.1.7

LDAP Key Manager Provider

The LDAP key manager provider uses an LDAP key store managed by the server to obtain server certificates.

Parent

The LDAP Key Manager Provider object inherits from Key Manager Provider.

LDAP Key Manager Provider Properties

You can use configuration expressions to set property values at startup time. For details, see Property Value Substitution.

Basic Properties Advanced Properties

base-dn
enabled
key-store-pin

java-class

Basic Properties

Use the --advanced option to access advanced properties.

base-dn

Synopsis

The base DN beneath which LDAP key store entries are located.

Default Value

None

Allowed Values

A valid DN.

Multi-valued

No

Required

Yes

Admin Action Required

None

Advanced

No

Read-Only

No

enabled

Synopsis

Indicates whether the Key Manager Provider is enabled for use.

Default Value

None

Allowed Values

true

false

Multi-valued

No

Required

Yes

Admin Action Required

None

Advanced

No

Read-Only

No

key-store-pin

Synopsis

Specifies the clear-text PIN needed to access the LDAP Key Manager Provider .

Default Value

None

Allowed Values

A string.

Multi-valued

No

Required

No

Admin Action Required

None

Changes to this property will take effect the next time that the LDAP Key Manager Provider is accessed.

Advanced

No

Read-Only

No

Advanced Properties

Use the --advanced option to access advanced properties.

java-class

Synopsis

The fully-qualified name of the Java class that provides the LDAP Key Manager Provider implementation.

Default Value

org.opends.server.extensions.LDAPKeyManagerProvider

Allowed Values

A Java class that extends or implements:

  • org.opends.server.api.KeyManagerProvider

Multi-valued

No

Required

Yes

Admin Action Required

The object must be disabled and re-enabled for changes to take effect.

Advanced

Yes

Read-Only

No

Copyright © 2010-2023 ForgeRock, all rights reserved.