Grouper External systems configuration

url

String

required.  Explain that for provisioning the URL 
should point to one node for consistency

user

String

optional

pass

String

encrypted if a password.  Save this like the configuration editor saves

configFileFromClasspath

String

isActiveDirectory

Boolean

tls

Boolean

saslAuthorizationId

String

saslRealm

String

batchSize

Integer

countLimit

Integer

timeLimit

Integer

time limit for search operations in millis

timeout

Integer

timeout to get a connection in millis

minPoolSize

Integer

3

maxPoolSize

Integer

10

validateOnCheckIn

Boolean

validateOnCheckOut

Boolean

defaults to true if all other validate methods are false

validatePeriodically

Boolean

validateTimerPeriod

String

PT30M

pruneTimerPeriod

String

pagedResultsSize

Integer

needs to be equal to or less than the max result size server setting

referral

String

set to 'follow' if using AD and using paged results size and need this for some reason (generally you shouldnt)

validator

String

drop down.  validator setup, currently supports CompareLdapValidator and SearchValidator. additional properties below for CompareLdapValidator.

validatorCompareDn

String

required for CompareLdapValidator.  check this DN exists when saving connection.  e.g. ou=people,dc=example,dc=com

validatorCompareAttribute

String

required for CompareLdapValidator.  e.g. ou    check this DN exists when saving connection

validatorCompareValue

String

required for CompareLdapValidator.  e.g. people

searchResultHandlers

String

comma-delimited list of classes to process LDAP search results. Useful if AD returns a ranged attribute for large
# groups (e.g., member;range=0-1499); include the GrouperRangeEntryHandler to handle progressive fetching.

searchIgnoreResultCodes

String

comma-delimited list of result codes (org.ldaptive.ResultCode) to ignore, e.g. TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS

enabled

Boolean

true

if this connector is enabled

url

String

Required

e.g. mysql:           jdbc:mysql://localhost:3306/grouper?useSSL=false
e.g. p6spy (log sql): [use the URL that your DB requires]
e.g. oracle:          jdbc:oracle:thin:@server.school.edu:1521:sid
e.g. hsqldb (a):      jdbc:hsqldb:dist/run/grouper;create=true
e.g. hsqldb (b):      jdbc:hsqldb:hsql://localhost:9001/grouper
e.g. postgres (a):        jdbc:postgresql://localhost:5432/database
e.g. postgres (b):        jdbc:postgresql://localhost:5432/database?currentSchema=mySchema
e.g. mssql:           jdbc:sqlserver://localhost:3280;databaseName=grouper

user

String

pass

String

Save this like the configuration editor saves

driver

String

note: you probably dont have to enter a driver, it will detect from URL. If it cant detect, then specify it here.
If this is not mysql, or postgres, make sure jar is in container.  These are the defaults
e.g. mysql:           com.mysql.jdbc.Driver
e.g. oracle:          oracle.jdbc.driver.OracleDriver
e.g. hsqldb:          org.hsqldb.jdbcDriver
e.g. postgres:        org.postgresql.Driver

c3p0.max_size

Integer

optional pooling params, these will default to the grouper.hibernate(.base).properties pooling settings
(get that value for the UI from that config)

c3p0.min_size

Integer

c3p0.timeout

Integer

seconds

c3p0.max_statements

Integer

c3p0.idle_test_period

Integer

c3p0.acquire_increment

Integer

c3p0.validate

Boolean

c3p0.debugUnreturnedConnectionStackTraces

Boolean

if unreturnedConnectionTimeout is non zero, then if connection takes too long it will be logged as stack

c3p0.unreturnedConnectionTimeout

Integer

enabled

Boolean

true

if this connector is enabled

server

String

required

user

String

pass

String

use method from config editor to save

from.address

String

required.  this is the default email address where mail from grouper will come from
e.g. noreply@school.edu

ssl

Boolean

starttls.enable

Boolean

ssl.trust

String

if you are doing SSL/TLS, you should put the smtp server here so it is trusted

port

Integer

25 for non-ssl, 465 for ssl

transport.protocol

String

smtp

use.protocol.in.property.names

Boolean

in the java mail settings if "smtp" or whatever the protocol is should be in the property names

smtp.ssl.protocols

String

if you have trouble connecting to SSL/TLS, try a different SSL protocol, e.g. TLSv1.2

smtp.socketFactory.class

String

generally saying SSL true is enough, though you might need to set a class. generally leave this blank

smtp.socketFactory.fallback

Boolean

generally you will leave this blank unless doing something advanced

subject.prefix

String

prefix all email's subjects.  e.g. TEST:

test.address

String

when running junit tests, this is the address that will be used

debug

Boolean

if debug info from java mail should be printed

enabled

Boolean

true

if this connector is enabled

host

String

required

user

String

password

String

password if not using private key

secret.privateKey

String textarea

note this is stored in secret.privateKey_0, secret.privateKey_0, if longer than 4k
you can encrypt the private key to connect with. if its more than 4k encrypted, then take it in chunks and they will be concatenated
# and use _0, _1, _2, etc. Note, replace newlines with $newline$ so it fits in a textfield

secret.privateKeyPassphrase

knownHostsEntry

connect to the host, and copy the known_hosts entry for the host to connect to
e.g. host.whatever ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA3B00cx5W9KPSjzik3E

deleteTempFilesAfterSession

if any temporary files (e.g. private key and known hosts) should be deleted after session, default true

timeoutMillis

10000

timeout in millis

enabled

Boolean

true

if this connector is enabled

loginEndpoint

String

login endpoint to get a token e.g. https://login.microsoftonline.com

DirectoryID

String

azure directory id e.g. 6c4dxxx0d

client_id

String