| setauthenticationldapaction_nestedgroupextraction |
Use this method to set allow nested group extraction, in which the Citrix ADC queries external LDAP servers to determine whether a group is part of another group. |
Syntax |
Parameters |
name |
Name of the LDAP profile to modify. This is mandatory parameter. |
nestedgroupextraction |
Allow nested group extraction, in which the Citrix ADC queries external LDAP servers to determine whether a group is part of another group. Default value = OFF. Possible Values : ON, OFF. |
maxnestinglevel |
If nested group extraction is ON, specifies the number of levels up to which group extraction is performed. Default value = 2. Minimum value = 2. |
groupnameidentifier |
Name that uniquely identifies a group in LDAP or Active Directory. |
groupsearchattribute |
LDAP group search attribute.
Used to determine to which groups a group belongs. |
groupsearchsubattribute |
LDAP group search subattribute.
Used to determine to which groups a group belongs. |
groupsearchfilter |
String to be combined with the default LDAP group search string to form the search value. For example, the group search filter ""vpnallowed=true"" when combined with the group identifier ""samaccount"" and the group name ""g1"" yields the LDAP search string ""(&(vpnallowed=true)(samaccount=g1)"". If nestedGroupExtraction is ENABLED, the filter is applied on the first level group search as well, otherwise first level groups (of which user is a direct member of) will be fetched without applying this filter. (Be sure to enclose the search string in two sets of double quotation marks; both sets are needed.) |
Return Value |
Returns simpleResult |
See Also |