LDAP_SEARCH_METHOD_USER LDAP_SEARCH_METHOD_CERTIFICATE LDAP_SEARCH_METHOD_CERTIFICATE_MAP STATE_DISABLED STATE_ENABLED Gets a list of all Client Certificate LDAP configurations. Creates the specified Client Certificate LDAP configurations. Deletes the specified Client Certificate LDAP configurations. Deletes all Client Certificate LDAP configurations. Sets the maximum LDAP response cache sizes in bytes. If zero is specified, the cache is not activated. Gets the maximum LDAP response cache sizes in bytes. If zero is specified, the cache is not activated. Sets the LDAP response cache timeout in seconds. If zero is specified, the cache is not activated. Gets the LDAP response cache timeout in seconds. If zero is specified, the cache is not activated. Sets the search options used by the Client Certificate LDAP configurations. Gets the search options used by the Client Certificate LDAP configurations. Sets the user classes (only in certficate search method) for the specified Client Certificate LDAP configurations. Gets the user classes (only in certficate search method) for the specified Client Certificate LDAP configurations. Sets the states indicating whether SSL/TLS should be used when connecting to the LDAP server. Gets the states indicating whether SSL/TLS should be used when connecting to the LDAP server. Sets the admin DNs for the specified Client Certificate LDAP configurations. Gets the admin DNs for the specified Client Certificate LDAP configurations. Sets the admin passwords for the specified Client Certificate LDAP configurations. Gets the admin passwords for the specified Client Certificate LDAP configurations. Sets the states indicating whether to use the client certificate's serial number instead of its subject (one or the other is always used in conjunction with the certificate issuer) when trying to match an entry in the certificate map subtree. Gets the states indicating whether to use the client certificate's serial number instead of its subject (one or the other is always used in conjunction with the certificate issuer) when trying to match an entry in the certificate map subtree. Sets the search bases for the subtrees used by group searches. Gets the search bases for the subtrees used by group searches. Sets the names of the attributes in the LDAP database that identify the group names in the group subtrees. Gets the names of the attributes in the LDAP database that identify the group names in the group subtrees. Sets the names of the attributes in the LDAP database that identify members (DNs) of a group. A typical key would be "member". Gets the names of the attributes in the LDAP database that identify members (DNs) of a group. A typical key would be "member". Sets the names of the attributes in the LDAP database that identify a user's authorization roles. Gets the names of the attributes in the LDAP database that identify a user's authorization roles. Gets the lists of servers the specified Client Certificate LDAP configurations are associated with. Adds/associates servers to the specified Client Certificate LDAP configurations. Removes servers from the specified Client Certificate LDAP configurations. Gets the lists of valid groups in which the clients must belong in order to be authorized (matches against the group key in the group subtree). A client only needs to be a member of a single specified group in order to be authorized. Adds/associates lists of valid groups in which the clients must belong in order to be authorized (matches against the group key in the group subtree). A client only needs to be a member of a single specified group in order to be authorized. Removes lists of valid groups in which the clients must belong in order to be authorized (matches against the group key in the group subtree). A client only needs to be a member of a single specified group in order to be authorized. Removes all lists of valid groups in which the clients must belong in order to be authorized (matches against the group key in the group subtree). A client only needs to be a member of a single specified group in order to be authorized. Gets the lists of valid roles that the client must possess in order to be authorized. A client only needs to match of a single specified role in order to be authorized. Adds/associates lists of valid roles that the client must possess in order to be authorized. A client only needs to match of a single specified role in order to be authorized. Removes lists of valid roles that the client must possess in order to be authorized. A client only needs to match of a single specified role in order to be authorized. Removes all lists of valid roles that the client must possess in order to be authorized. A client only needs to match of a single specified role in order to be authorized. Sets the description for a set of Client Certificate LDAP configurations. This is an arbitrary field which can be used for any purpose. Gets the descriptions for a set of Client Certificate LDAP configurations. Gets the version information for this interface. Gets a list of all Client Certificate LDAP configurations. Creates the specified Client Certificate LDAP configurations. Deletes the specified Client Certificate LDAP configurations. Deletes all Client Certificate LDAP configurations. Sets the maximum LDAP response cache sizes in bytes. If zero is specified, the cache is not activated. Gets the maximum LDAP response cache sizes in bytes. If zero is specified, the cache is not activated. Sets the LDAP response cache timeout in seconds. If zero is specified, the cache is not activated. Gets the LDAP response cache timeout in seconds. If zero is specified, the cache is not activated. Sets the search options used by the Client Certificate LDAP configurations. Gets the search options used by the Client Certificate LDAP configurations. Sets the user classes (only in certficate search method) for the specified Client Certificate LDAP configurations. Gets the user classes (only in certficate search method) for the specified Client Certificate LDAP configurations. Sets the states indicating whether SSL/TLS should be used when connecting to the LDAP server. Gets the states indicating whether SSL/TLS should be used when connecting to the LDAP server. Sets the admin DNs for the specified Client Certificate LDAP configurations. Gets the admin DNs for the specified Client Certificate LDAP configurations. Sets the admin passwords for the specified Client Certificate LDAP configurations. Gets the admin passwords for the specified Client Certificate LDAP configurations. Sets the states indicating whether to use the client certificate's serial number instead of its subject (one or the other is always used in conjunction with the certificate issuer) when trying to match an entry in the certificate map subtree. Gets the states indicating whether to use the client certificate's serial number instead of its subject (one or the other is always used in conjunction with the certificate issuer) when trying to match an entry in the certificate map subtree. Sets the search bases for the subtrees used by group searches. Gets the search bases for the subtrees used by group searches. Sets the names of the attributes in the LDAP database that identify the group names in the group subtrees. Gets the names of the attributes in the LDAP database that identify the group names in the group subtrees. Sets the names of the attributes in the LDAP database that identify members (DNs) of a group. A typical key would be "member". Gets the names of the attributes in the LDAP database that identify members (DNs) of a group. A typical key would be "member". Sets the names of the attributes in the LDAP database that identify a user's authorization roles. Gets the names of the attributes in the LDAP database that identify a user's authorization roles. Gets the lists of servers the specified Client Certificate LDAP configurations are associated with. Adds/associates servers to the specified Client Certificate LDAP configurations. Removes servers from the specified Client Certificate LDAP configurations. Gets the lists of valid groups in which the clients must belong in order to be authorized (matches against the group key in the group subtree). A client only needs to be a member of a single specified group in order to be authorized. Adds/associates lists of valid groups in which the clients must belong in order to be authorized (matches against the group key in the group subtree). A client only needs to be a member of a single specified group in order to be authorized. Removes lists of valid groups in which the clients must belong in order to be authorized (matches against the group key in the group subtree). A client only needs to be a member of a single specified group in order to be authorized. Removes all lists of valid groups in which the clients must belong in order to be authorized (matches against the group key in the group subtree). A client only needs to be a member of a single specified group in order to be authorized. Gets the lists of valid roles that the client must possess in order to be authorized. A client only needs to match of a single specified role in order to be authorized. Adds/associates lists of valid roles that the client must possess in order to be authorized. A client only needs to match of a single specified role in order to be authorized. Removes lists of valid roles that the client must possess in order to be authorized. A client only needs to match of a single specified role in order to be authorized. Removes all lists of valid roles that the client must possess in order to be authorized. A client only needs to match of a single specified role in order to be authorized. Sets the description for a set of Client Certificate LDAP configurations. This is an arbitrary field which can be used for any purpose. Gets the descriptions for a set of Client Certificate LDAP configurations. Gets the version information for this interface. The CCLDAPConfiguration interface enables you to manage SSL Client Certificate LDAP PAM configuration.