bea.com | products | dev2dev | support | askBEA

Download Docs | Site Map | Glossary
Search

Administration Console Online Help

WebLogic Authentication Provider-->Details

Overview

This page has additional attributes for the WebLogic Authentication provider.

- Supported Import Formats—A format is simply a data format that specifies how security data should be imported. Supported formats are the list of data formats that the WebLogic Authentication provider understands how to process. The WebLogic Authentication provider can only import DefaultATN formats. This attribute is set by default.

- Supported Import Constraints—Constraints are key/value pairs that specify options to the import process. Use constraints to control which security data is imported into the security provider's database. For example, you may want to import only users (not groups) from an Authentication provider's database. Supported constraints are the list of constraints you may specify during the migration process for a security provider. When using the WebLogic Authentication provider, you have the option of importing users and groups, only users, or only groups.

- Supported Export Formats—A format is simply a data format that specifies how security data should be exported. Supported formats are the list of data formats that the WebLogic Authentication provider understands how to process. The WebLogic Authentication provider can only export DefaultATN formats. This attribute is set by default.

- Supported Export Constraints—Constraints are key/value pairs that specify options to the export process. Use constraints to control which security data is exported into the security provider's database. For example, you may want to export only users (not groups) from an Authentication provider's database. Supported constraints are the list of constraints you may specify during the migration process for a security provider. When using the WebLogic Authentication provider, you have the option of exporting users and groups, only users, or only groups.

- Group Membership Searching—Controls whether group searches are limited in depth or unlimited. This attribute controls how deeply a search should recursive into nested groups. For configurations that use only the first level of nested group hierarchy, this attribute allows improved performance during user searches by limiting the search to the first level of the group.

  - If a limited search is specified, the Max Group Membership Search Level attribute must be specified.

  - If an unlimited search is specified, the Max Group Membership Search Level attribute is ignored.

- Max Group Membership Search Level—Controls the depth of a group membership search if the Group Membership Searching attribute is specified. Possible values are:

  - 0—Indicates only direct groups will be found. That is, when searching for membership in Group A, only direct members of Group A will be found. If Group B is a member of Group A, the members will not be found by this search.

  - Any positive number—Indicates the number of levels to search. For example, if this attribute is set to 1, a search for membership in Group A will return direct members of Group A. If Group B is a member of Group A, the members of Group B will also be found by this search. However, if Group C is a member of Group B, the members of Group C will not be found by this search.