HideEntriesByFilter Plug-In Understanding the General Purpose Plug-Ins

Understanding Oracle Virtual Directory Plug-Ins 4-5 fromRDN Identifies the original RDN attribute name from the source directory to be replaced or renamed in Oracle Virtual Directory. toRDN Identifies the new RDN attribute name to be used in Oracle Virtual Directory and replaces the attribute name identified by the fromRDN configuration parameter. dnAttributes List of attributes with DNs to perform RDN renaming on. The default list of attributes is member, uniquemember, manager, owner, managedby.

4.2.3 UPNBind Plug-In

The UPNBind plug-in enables you to bind using any configured username attribute, such as cn, SamAccountName, sn, uid, and so on, or usernamesuffix attributes, such as UserPrincipalName, Mail, and so on. This plug-in is useful for Active Directory-centric applications and can simplify application development by removing the requirement to look-up DNs.

4.2.3.1 Configuration Parameters

The UPNBind plug-in has the following configuration parameters: NameAttributes Identifies a list of naming attributes to use for authenticating users. For example: cn, sn, uid, SAMAccountName. NameAndSuffixAttributes A list of attributes in the form of namesuffix, such as UPN or mail, to use for authenticating users. BindOption Determines how the UPNBind plug-in should process resulting entries when multiple users have same values for the NameAttributes and NameAndSuffixAttributes parameters. The following is a list and description of the supported values for the BindOption option. The default setting is QuickFail. ■ QuickFail: When multiple users have same values for configured attributes, the UPNBind plug-in displays a Found more than one user entry error and the LDAP bind fails. ■ FirstUser: The UPNBind plug-in binds as the first user and returns the result of that bind. Note: When the value is set to true, and an entry has multiple values for the new RDN attribute, then Oracle Virtual Directory uses the first value in the attribute value vector in RDN. Note: The UPNBind plug-in is supported only for deployment as a global plug-in—do not deploy the UPNBind plug-in on adapters. Note: At a minimum, either the NameAttributes or NameAndSuffixAttributes configuration parameter must be set.