LdapGroupSearch

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

The group search configuration for the Elasticsearch security LDAP realm.

base_dn (string): Specifies a container DN to search for groups in which the user has membership
filter (string): Specifies a filter to search for a group. When unspecified, the security realm searches for group, groupOfNames, groupOfUniqueNames, or posixGroup with the attributes member, memberOf, or memberUid. Any instance of {0} in the filter is replaced by the user attribute defined in user_attribute.
scope (string; allowed values: [sub_tree, one_level, base]): Specifies whether the group search should be sub_tree, one_level or base. one_level only searches objects directly contained within the base_dn. The default sub_tree searches all objects contained under base_dn. base specifies that the base_dn is a group object, and that it is the only group considered.
user_attribute (string): Specifies the user attribute that is fetched and provided as a parameter to the filter. When unspecified, the user DN is passed to the filter.

{
   "base_dn" : "string",
   "filter" : "string",
   "scope" : "string",
   "user_attribute" : "string"
}