powerscale.Adsprovider
Explore with Pulumi AI
This resource is used to manage the ADS provider entity of PowerScale Array. We can Create, Update and Delete the ADS provider using this resource. We can also import an existing ADS provider from PowerScale array.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as powerscale from "@pulumi/powerscale";
// PowerScale ADS provider allows you to authenticate users and groups
const adsTest = new powerscale.Adsprovider("adsTest", {
password: "password",
user: "admin",
});
import pulumi
import pulumi_powerscale as powerscale
# PowerScale ADS provider allows you to authenticate users and groups
ads_test = powerscale.Adsprovider("adsTest",
password="password",
user="admin")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/powerscale/powerscale"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
// PowerScale ADS provider allows you to authenticate users and groups
_, err := powerscale.NewAdsprovider(ctx, "adsTest", &powerscale.AdsproviderArgs{
Password: pulumi.String("password"),
User: pulumi.String("admin"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Powerscale = Pulumi.Powerscale;
return await Deployment.RunAsync(() =>
{
// PowerScale ADS provider allows you to authenticate users and groups
var adsTest = new Powerscale.Adsprovider("adsTest", new()
{
Password = "password",
User = "admin",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.powerscale.Adsprovider;
import com.pulumi.powerscale.AdsproviderArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
// PowerScale ADS provider allows you to authenticate users and groups
var adsTest = new Adsprovider("adsTest", AdsproviderArgs.builder()
.password("password")
.user("admin")
.build());
}
}
resources:
# PowerScale ADS provider allows you to authenticate users and groups
adsTest:
type: powerscale:Adsprovider
properties:
password: password
# User should have join permission
user: admin
Create Adsprovider Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Adsprovider(name: string, args: AdsproviderArgs, opts?: CustomResourceOptions);
@overload
def Adsprovider(resource_name: str,
args: AdsproviderArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Adsprovider(resource_name: str,
opts: Optional[ResourceOptions] = None,
password: Optional[str] = None,
user: Optional[str] = None,
adsprovider_id: Optional[str] = None,
allocate_gids: Optional[bool] = None,
allocate_uids: Optional[bool] = None,
assume_default_domain: Optional[bool] = None,
authentication: Optional[bool] = None,
check_duplicates: Optional[bool] = None,
check_online_interval: Optional[float] = None,
controller_time: Optional[float] = None,
create_home_directory: Optional[bool] = None,
dns_domain: Optional[str] = None,
domain_controller: Optional[str] = None,
domain_offline_alerts: Optional[bool] = None,
extra_expected_spns: Optional[Sequence[str]] = None,
findable_groups: Optional[Sequence[str]] = None,
findable_users: Optional[Sequence[str]] = None,
groupnet: Optional[str] = None,
home_directory_template: Optional[str] = None,
ignore_all_trusts: Optional[bool] = None,
ignored_trusted_domains: Optional[Sequence[str]] = None,
include_trusted_domains: Optional[Sequence[str]] = None,
instance: Optional[str] = None,
kerberos_hdfs_spn: Optional[bool] = None,
kerberos_nfs_spn: Optional[bool] = None,
ldap_sign_and_seal: Optional[bool] = None,
login_shell: Optional[str] = None,
lookup_domains: Optional[Sequence[str]] = None,
lookup_groups: Optional[bool] = None,
lookup_normalize_groups: Optional[bool] = None,
lookup_normalize_users: Optional[bool] = None,
lookup_users: Optional[bool] = None,
machine_account: Optional[str] = None,
machine_password_changes: Optional[bool] = None,
machine_password_lifespan: Optional[float] = None,
name: Optional[str] = None,
node_dc_affinity: Optional[str] = None,
node_dc_affinity_timeout: Optional[float] = None,
nss_enumeration: Optional[bool] = None,
organizational_unit: Optional[str] = None,
reset_schannel: Optional[bool] = None,
restrict_findable: Optional[bool] = None,
rpc_call_timeout: Optional[float] = None,
scope: Optional[str] = None,
server_retry_limit: Optional[float] = None,
sfu_support: Optional[str] = None,
spns: Optional[Sequence[str]] = None,
store_sfu_mappings: Optional[bool] = None,
unfindable_groups: Optional[Sequence[str]] = None,
unfindable_users: Optional[Sequence[str]] = None)
func NewAdsprovider(ctx *Context, name string, args AdsproviderArgs, opts ...ResourceOption) (*Adsprovider, error)
public Adsprovider(string name, AdsproviderArgs args, CustomResourceOptions? opts = null)
public Adsprovider(String name, AdsproviderArgs args)
public Adsprovider(String name, AdsproviderArgs args, CustomResourceOptions options)
type: powerscale:Adsprovider
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args AdsproviderArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AdsproviderArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AdsproviderArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AdsproviderArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AdsproviderArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var adsproviderResource = new Powerscale.Adsprovider("adsproviderResource", new()
{
Password = "string",
User = "string",
AdsproviderId = "string",
AllocateGids = false,
AllocateUids = false,
AssumeDefaultDomain = false,
Authentication = false,
CheckDuplicates = false,
CheckOnlineInterval = 0,
ControllerTime = 0,
CreateHomeDirectory = false,
DnsDomain = "string",
DomainController = "string",
DomainOfflineAlerts = false,
ExtraExpectedSpns = new[]
{
"string",
},
FindableGroups = new[]
{
"string",
},
FindableUsers = new[]
{
"string",
},
Groupnet = "string",
HomeDirectoryTemplate = "string",
IgnoreAllTrusts = false,
IgnoredTrustedDomains = new[]
{
"string",
},
IncludeTrustedDomains = new[]
{
"string",
},
Instance = "string",
KerberosHdfsSpn = false,
KerberosNfsSpn = false,
LdapSignAndSeal = false,
LoginShell = "string",
LookupDomains = new[]
{
"string",
},
LookupGroups = false,
LookupNormalizeGroups = false,
LookupNormalizeUsers = false,
LookupUsers = false,
MachineAccount = "string",
MachinePasswordChanges = false,
MachinePasswordLifespan = 0,
Name = "string",
NodeDcAffinity = "string",
NodeDcAffinityTimeout = 0,
NssEnumeration = false,
OrganizationalUnit = "string",
ResetSchannel = false,
RestrictFindable = false,
RpcCallTimeout = 0,
Scope = "string",
ServerRetryLimit = 0,
SfuSupport = "string",
Spns = new[]
{
"string",
},
StoreSfuMappings = false,
UnfindableGroups = new[]
{
"string",
},
UnfindableUsers = new[]
{
"string",
},
});
example, err := powerscale.NewAdsprovider(ctx, "adsproviderResource", &powerscale.AdsproviderArgs{
Password: pulumi.String("string"),
User: pulumi.String("string"),
AdsproviderId: pulumi.String("string"),
AllocateGids: pulumi.Bool(false),
AllocateUids: pulumi.Bool(false),
AssumeDefaultDomain: pulumi.Bool(false),
Authentication: pulumi.Bool(false),
CheckDuplicates: pulumi.Bool(false),
CheckOnlineInterval: pulumi.Float64(0),
ControllerTime: pulumi.Float64(0),
CreateHomeDirectory: pulumi.Bool(false),
DnsDomain: pulumi.String("string"),
DomainController: pulumi.String("string"),
DomainOfflineAlerts: pulumi.Bool(false),
ExtraExpectedSpns: pulumi.StringArray{
pulumi.String("string"),
},
FindableGroups: pulumi.StringArray{
pulumi.String("string"),
},
FindableUsers: pulumi.StringArray{
pulumi.String("string"),
},
Groupnet: pulumi.String("string"),
HomeDirectoryTemplate: pulumi.String("string"),
IgnoreAllTrusts: pulumi.Bool(false),
IgnoredTrustedDomains: pulumi.StringArray{
pulumi.String("string"),
},
IncludeTrustedDomains: pulumi.StringArray{
pulumi.String("string"),
},
Instance: pulumi.String("string"),
KerberosHdfsSpn: pulumi.Bool(false),
KerberosNfsSpn: pulumi.Bool(false),
LdapSignAndSeal: pulumi.Bool(false),
LoginShell: pulumi.String("string"),
LookupDomains: pulumi.StringArray{
pulumi.String("string"),
},
LookupGroups: pulumi.Bool(false),
LookupNormalizeGroups: pulumi.Bool(false),
LookupNormalizeUsers: pulumi.Bool(false),
LookupUsers: pulumi.Bool(false),
MachineAccount: pulumi.String("string"),
MachinePasswordChanges: pulumi.Bool(false),
MachinePasswordLifespan: pulumi.Float64(0),
Name: pulumi.String("string"),
NodeDcAffinity: pulumi.String("string"),
NodeDcAffinityTimeout: pulumi.Float64(0),
NssEnumeration: pulumi.Bool(false),
OrganizationalUnit: pulumi.String("string"),
ResetSchannel: pulumi.Bool(false),
RestrictFindable: pulumi.Bool(false),
RpcCallTimeout: pulumi.Float64(0),
Scope: pulumi.String("string"),
ServerRetryLimit: pulumi.Float64(0),
SfuSupport: pulumi.String("string"),
Spns: pulumi.StringArray{
pulumi.String("string"),
},
StoreSfuMappings: pulumi.Bool(false),
UnfindableGroups: pulumi.StringArray{
pulumi.String("string"),
},
UnfindableUsers: pulumi.StringArray{
pulumi.String("string"),
},
})
var adsproviderResource = new Adsprovider("adsproviderResource", AdsproviderArgs.builder()
.password("string")
.user("string")
.adsproviderId("string")
.allocateGids(false)
.allocateUids(false)
.assumeDefaultDomain(false)
.authentication(false)
.checkDuplicates(false)
.checkOnlineInterval(0)
.controllerTime(0)
.createHomeDirectory(false)
.dnsDomain("string")
.domainController("string")
.domainOfflineAlerts(false)
.extraExpectedSpns("string")
.findableGroups("string")
.findableUsers("string")
.groupnet("string")
.homeDirectoryTemplate("string")
.ignoreAllTrusts(false)
.ignoredTrustedDomains("string")
.includeTrustedDomains("string")
.instance("string")
.kerberosHdfsSpn(false)
.kerberosNfsSpn(false)
.ldapSignAndSeal(false)
.loginShell("string")
.lookupDomains("string")
.lookupGroups(false)
.lookupNormalizeGroups(false)
.lookupNormalizeUsers(false)
.lookupUsers(false)
.machineAccount("string")
.machinePasswordChanges(false)
.machinePasswordLifespan(0)
.name("string")
.nodeDcAffinity("string")
.nodeDcAffinityTimeout(0)
.nssEnumeration(false)
.organizationalUnit("string")
.resetSchannel(false)
.restrictFindable(false)
.rpcCallTimeout(0)
.scope("string")
.serverRetryLimit(0)
.sfuSupport("string")
.spns("string")
.storeSfuMappings(false)
.unfindableGroups("string")
.unfindableUsers("string")
.build());
adsprovider_resource = powerscale.Adsprovider("adsproviderResource",
password="string",
user="string",
adsprovider_id="string",
allocate_gids=False,
allocate_uids=False,
assume_default_domain=False,
authentication=False,
check_duplicates=False,
check_online_interval=0,
controller_time=0,
create_home_directory=False,
dns_domain="string",
domain_controller="string",
domain_offline_alerts=False,
extra_expected_spns=["string"],
findable_groups=["string"],
findable_users=["string"],
groupnet="string",
home_directory_template="string",
ignore_all_trusts=False,
ignored_trusted_domains=["string"],
include_trusted_domains=["string"],
instance="string",
kerberos_hdfs_spn=False,
kerberos_nfs_spn=False,
ldap_sign_and_seal=False,
login_shell="string",
lookup_domains=["string"],
lookup_groups=False,
lookup_normalize_groups=False,
lookup_normalize_users=False,
lookup_users=False,
machine_account="string",
machine_password_changes=False,
machine_password_lifespan=0,
name="string",
node_dc_affinity="string",
node_dc_affinity_timeout=0,
nss_enumeration=False,
organizational_unit="string",
reset_schannel=False,
restrict_findable=False,
rpc_call_timeout=0,
scope="string",
server_retry_limit=0,
sfu_support="string",
spns=["string"],
store_sfu_mappings=False,
unfindable_groups=["string"],
unfindable_users=["string"])
const adsproviderResource = new powerscale.Adsprovider("adsproviderResource", {
password: "string",
user: "string",
adsproviderId: "string",
allocateGids: false,
allocateUids: false,
assumeDefaultDomain: false,
authentication: false,
checkDuplicates: false,
checkOnlineInterval: 0,
controllerTime: 0,
createHomeDirectory: false,
dnsDomain: "string",
domainController: "string",
domainOfflineAlerts: false,
extraExpectedSpns: ["string"],
findableGroups: ["string"],
findableUsers: ["string"],
groupnet: "string",
homeDirectoryTemplate: "string",
ignoreAllTrusts: false,
ignoredTrustedDomains: ["string"],
includeTrustedDomains: ["string"],
instance: "string",
kerberosHdfsSpn: false,
kerberosNfsSpn: false,
ldapSignAndSeal: false,
loginShell: "string",
lookupDomains: ["string"],
lookupGroups: false,
lookupNormalizeGroups: false,
lookupNormalizeUsers: false,
lookupUsers: false,
machineAccount: "string",
machinePasswordChanges: false,
machinePasswordLifespan: 0,
name: "string",
nodeDcAffinity: "string",
nodeDcAffinityTimeout: 0,
nssEnumeration: false,
organizationalUnit: "string",
resetSchannel: false,
restrictFindable: false,
rpcCallTimeout: 0,
scope: "string",
serverRetryLimit: 0,
sfuSupport: "string",
spns: ["string"],
storeSfuMappings: false,
unfindableGroups: ["string"],
unfindableUsers: ["string"],
});
type: powerscale:Adsprovider
properties:
adsproviderId: string
allocateGids: false
allocateUids: false
assumeDefaultDomain: false
authentication: false
checkDuplicates: false
checkOnlineInterval: 0
controllerTime: 0
createHomeDirectory: false
dnsDomain: string
domainController: string
domainOfflineAlerts: false
extraExpectedSpns:
- string
findableGroups:
- string
findableUsers:
- string
groupnet: string
homeDirectoryTemplate: string
ignoreAllTrusts: false
ignoredTrustedDomains:
- string
includeTrustedDomains:
- string
instance: string
kerberosHdfsSpn: false
kerberosNfsSpn: false
ldapSignAndSeal: false
loginShell: string
lookupDomains:
- string
lookupGroups: false
lookupNormalizeGroups: false
lookupNormalizeUsers: false
lookupUsers: false
machineAccount: string
machinePasswordChanges: false
machinePasswordLifespan: 0
name: string
nodeDcAffinity: string
nodeDcAffinityTimeout: 0
nssEnumeration: false
organizationalUnit: string
password: string
resetSchannel: false
restrictFindable: false
rpcCallTimeout: 0
scope: string
serverRetryLimit: 0
sfuSupport: string
spns:
- string
storeSfuMappings: false
unfindableGroups:
- string
unfindableUsers:
- string
user: string
Adsprovider Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Adsprovider resource accepts the following input properties:
- Password string
- Specifies the password used during domain join.
- User string
- Specifies the user name that has permission to join a machine to the given domain.
- Adsprovider
Id string - Specifies the ID of the Active Directory provider instance.
- Allocate
Gids bool - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- Allocate
Uids bool - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- Assume
Default boolDomain - Enables lookup of unqualified user names in the primary domain.
- Authentication bool
- Enables authentication and identity management through the authentication provider.
- Check
Duplicates bool - Check for duplicate SPNs registered in Active Directory.
- Check
Online doubleInterval - Specifies the time in seconds between provider online checks.
- Controller
Time double - Specifies the current time for the domain controllers.
- Create
Home boolDirectory - Automatically creates a home directory on the first login.
- Dns
Domain string - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- Domain
Controller string - Specifies the domain controller to which the authentication service should send requests
- Domain
Offline boolAlerts - Sends an alert if the domain goes offline.
- Extra
Expected List<string>Spns - List of additional SPNs to expect beyond what automatic checking routines might find
- Findable
Groups List<string> - Sets list of groups that can be resolved.
- Findable
Users List<string> - Sets list of users that can be resolved.
- Groupnet string
- Groupnet identifier.
- Home
Directory stringTemplate - Specifies the path to the home directory template.
- Ignore
All boolTrusts - If set to true, ignores all trusted domains.
- Ignored
Trusted List<string>Domains - Includes trusted domains when 'ignorealltrusts' is set to false.
- Include
Trusted List<string>Domains - Includes trusted domains when 'ignorealltrusts' is set to true.
- Instance string
- Specifies Active Directory provider instance.
- Kerberos
Hdfs boolSpn - Determines if connecting through HDFS with Kerberos.
- Kerberos
Nfs boolSpn - Determines if connecting through NFS with Kerberos.
- Ldap
Sign boolAnd Seal - Enables encryption and signing on LDAP requests.
- Login
Shell string - Specifies the login shell path.
- Lookup
Domains List<string> - Limits user and group lookups to the specified domains.
- Lookup
Groups bool - Looks up AD groups in other providers before allocating a group ID.
- Lookup
Normalize boolGroups - Normalizes AD group names to lowercase before look up.
- Lookup
Normalize boolUsers - Normalize AD user names to lowercase before look up.
- Lookup
Users bool - Looks up AD users in other providers before allocating a user ID.
- Machine
Account string - Specifies the machine account name when creating a SAM account with Active Directory.
- Machine
Password boolChanges - Enables periodic changes of the machine password for security.
- Machine
Password doubleLifespan - Sets maximum age of a password in seconds.
- Name string
- Specifies the Active Directory provider name.
- Node
Dc stringAffinity - Specifies the domain controller for which the node has affinity.
- Node
Dc doubleAffinity Timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- Nss
Enumeration bool - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- Organizational
Unit string - Specifies the organizational unit.
- Reset
Schannel bool - Resets the secure channel to the primary domain.
- Restrict
Findable bool - Check the provider for filtered lists of findable and unfindable users and groups.
- Rpc
Call doubleTimeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- Scope string
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- Server
Retry doubleLimit - The number of retries attempted when a call to Active Directory fails due to network error.
- Sfu
Support string - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- Spns List<string>
- Currently configured SPNs.
- Store
Sfu boolMappings - Stores SFU mappings permanently in the ID mapper.
- Unfindable
Groups List<string> - Specifies groups that cannot be resolved by the provider.
- Unfindable
Users List<string> - Specifies users that cannot be resolved by the provider.
- Password string
- Specifies the password used during domain join.
- User string
- Specifies the user name that has permission to join a machine to the given domain.
- Adsprovider
Id string - Specifies the ID of the Active Directory provider instance.
- Allocate
Gids bool - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- Allocate
Uids bool - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- Assume
Default boolDomain - Enables lookup of unqualified user names in the primary domain.
- Authentication bool
- Enables authentication and identity management through the authentication provider.
- Check
Duplicates bool - Check for duplicate SPNs registered in Active Directory.
- Check
Online float64Interval - Specifies the time in seconds between provider online checks.
- Controller
Time float64 - Specifies the current time for the domain controllers.
- Create
Home boolDirectory - Automatically creates a home directory on the first login.
- Dns
Domain string - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- Domain
Controller string - Specifies the domain controller to which the authentication service should send requests
- Domain
Offline boolAlerts - Sends an alert if the domain goes offline.
- Extra
Expected []stringSpns - List of additional SPNs to expect beyond what automatic checking routines might find
- Findable
Groups []string - Sets list of groups that can be resolved.
- Findable
Users []string - Sets list of users that can be resolved.
- Groupnet string
- Groupnet identifier.
- Home
Directory stringTemplate - Specifies the path to the home directory template.
- Ignore
All boolTrusts - If set to true, ignores all trusted domains.
- Ignored
Trusted []stringDomains - Includes trusted domains when 'ignorealltrusts' is set to false.
- Include
Trusted []stringDomains - Includes trusted domains when 'ignorealltrusts' is set to true.
- Instance string
- Specifies Active Directory provider instance.
- Kerberos
Hdfs boolSpn - Determines if connecting through HDFS with Kerberos.
- Kerberos
Nfs boolSpn - Determines if connecting through NFS with Kerberos.
- Ldap
Sign boolAnd Seal - Enables encryption and signing on LDAP requests.
- Login
Shell string - Specifies the login shell path.
- Lookup
Domains []string - Limits user and group lookups to the specified domains.
- Lookup
Groups bool - Looks up AD groups in other providers before allocating a group ID.
- Lookup
Normalize boolGroups - Normalizes AD group names to lowercase before look up.
- Lookup
Normalize boolUsers - Normalize AD user names to lowercase before look up.
- Lookup
Users bool - Looks up AD users in other providers before allocating a user ID.
- Machine
Account string - Specifies the machine account name when creating a SAM account with Active Directory.
- Machine
Password boolChanges - Enables periodic changes of the machine password for security.
- Machine
Password float64Lifespan - Sets maximum age of a password in seconds.
- Name string
- Specifies the Active Directory provider name.
- Node
Dc stringAffinity - Specifies the domain controller for which the node has affinity.
- Node
Dc float64Affinity Timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- Nss
Enumeration bool - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- Organizational
Unit string - Specifies the organizational unit.
- Reset
Schannel bool - Resets the secure channel to the primary domain.
- Restrict
Findable bool - Check the provider for filtered lists of findable and unfindable users and groups.
- Rpc
Call float64Timeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- Scope string
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- Server
Retry float64Limit - The number of retries attempted when a call to Active Directory fails due to network error.
- Sfu
Support string - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- Spns []string
- Currently configured SPNs.
- Store
Sfu boolMappings - Stores SFU mappings permanently in the ID mapper.
- Unfindable
Groups []string - Specifies groups that cannot be resolved by the provider.
- Unfindable
Users []string - Specifies users that cannot be resolved by the provider.
- password String
- Specifies the password used during domain join.
- user String
- Specifies the user name that has permission to join a machine to the given domain.
- adsprovider
Id String - Specifies the ID of the Active Directory provider instance.
- allocate
Gids Boolean - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- allocate
Uids Boolean - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- assume
Default BooleanDomain - Enables lookup of unqualified user names in the primary domain.
- authentication Boolean
- Enables authentication and identity management through the authentication provider.
- check
Duplicates Boolean - Check for duplicate SPNs registered in Active Directory.
- check
Online DoubleInterval - Specifies the time in seconds between provider online checks.
- controller
Time Double - Specifies the current time for the domain controllers.
- create
Home BooleanDirectory - Automatically creates a home directory on the first login.
- dns
Domain String - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- domain
Controller String - Specifies the domain controller to which the authentication service should send requests
- domain
Offline BooleanAlerts - Sends an alert if the domain goes offline.
- extra
Expected List<String>Spns - List of additional SPNs to expect beyond what automatic checking routines might find
- findable
Groups List<String> - Sets list of groups that can be resolved.
- findable
Users List<String> - Sets list of users that can be resolved.
- groupnet String
- Groupnet identifier.
- home
Directory StringTemplate - Specifies the path to the home directory template.
- ignore
All BooleanTrusts - If set to true, ignores all trusted domains.
- ignored
Trusted List<String>Domains - Includes trusted domains when 'ignorealltrusts' is set to false.
- include
Trusted List<String>Domains - Includes trusted domains when 'ignorealltrusts' is set to true.
- instance String
- Specifies Active Directory provider instance.
- kerberos
Hdfs BooleanSpn - Determines if connecting through HDFS with Kerberos.
- kerberos
Nfs BooleanSpn - Determines if connecting through NFS with Kerberos.
- ldap
Sign BooleanAnd Seal - Enables encryption and signing on LDAP requests.
- login
Shell String - Specifies the login shell path.
- lookup
Domains List<String> - Limits user and group lookups to the specified domains.
- lookup
Groups Boolean - Looks up AD groups in other providers before allocating a group ID.
- lookup
Normalize BooleanGroups - Normalizes AD group names to lowercase before look up.
- lookup
Normalize BooleanUsers - Normalize AD user names to lowercase before look up.
- lookup
Users Boolean - Looks up AD users in other providers before allocating a user ID.
- machine
Account String - Specifies the machine account name when creating a SAM account with Active Directory.
- machine
Password BooleanChanges - Enables periodic changes of the machine password for security.
- machine
Password DoubleLifespan - Sets maximum age of a password in seconds.
- name String
- Specifies the Active Directory provider name.
- node
Dc StringAffinity - Specifies the domain controller for which the node has affinity.
- node
Dc DoubleAffinity Timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- nss
Enumeration Boolean - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- organizational
Unit String - Specifies the organizational unit.
- reset
Schannel Boolean - Resets the secure channel to the primary domain.
- restrict
Findable Boolean - Check the provider for filtered lists of findable and unfindable users and groups.
- rpc
Call DoubleTimeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- scope String
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- server
Retry DoubleLimit - The number of retries attempted when a call to Active Directory fails due to network error.
- sfu
Support String - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- spns List<String>
- Currently configured SPNs.
- store
Sfu BooleanMappings - Stores SFU mappings permanently in the ID mapper.
- unfindable
Groups List<String> - Specifies groups that cannot be resolved by the provider.
- unfindable
Users List<String> - Specifies users that cannot be resolved by the provider.
- password string
- Specifies the password used during domain join.
- user string
- Specifies the user name that has permission to join a machine to the given domain.
- adsprovider
Id string - Specifies the ID of the Active Directory provider instance.
- allocate
Gids boolean - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- allocate
Uids boolean - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- assume
Default booleanDomain - Enables lookup of unqualified user names in the primary domain.
- authentication boolean
- Enables authentication and identity management through the authentication provider.
- check
Duplicates boolean - Check for duplicate SPNs registered in Active Directory.
- check
Online numberInterval - Specifies the time in seconds between provider online checks.
- controller
Time number - Specifies the current time for the domain controllers.
- create
Home booleanDirectory - Automatically creates a home directory on the first login.
- dns
Domain string - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- domain
Controller string - Specifies the domain controller to which the authentication service should send requests
- domain
Offline booleanAlerts - Sends an alert if the domain goes offline.
- extra
Expected string[]Spns - List of additional SPNs to expect beyond what automatic checking routines might find
- findable
Groups string[] - Sets list of groups that can be resolved.
- findable
Users string[] - Sets list of users that can be resolved.
- groupnet string
- Groupnet identifier.
- home
Directory stringTemplate - Specifies the path to the home directory template.
- ignore
All booleanTrusts - If set to true, ignores all trusted domains.
- ignored
Trusted string[]Domains - Includes trusted domains when 'ignorealltrusts' is set to false.
- include
Trusted string[]Domains - Includes trusted domains when 'ignorealltrusts' is set to true.
- instance string
- Specifies Active Directory provider instance.
- kerberos
Hdfs booleanSpn - Determines if connecting through HDFS with Kerberos.
- kerberos
Nfs booleanSpn - Determines if connecting through NFS with Kerberos.
- ldap
Sign booleanAnd Seal - Enables encryption and signing on LDAP requests.
- login
Shell string - Specifies the login shell path.
- lookup
Domains string[] - Limits user and group lookups to the specified domains.
- lookup
Groups boolean - Looks up AD groups in other providers before allocating a group ID.
- lookup
Normalize booleanGroups - Normalizes AD group names to lowercase before look up.
- lookup
Normalize booleanUsers - Normalize AD user names to lowercase before look up.
- lookup
Users boolean - Looks up AD users in other providers before allocating a user ID.
- machine
Account string - Specifies the machine account name when creating a SAM account with Active Directory.
- machine
Password booleanChanges - Enables periodic changes of the machine password for security.
- machine
Password numberLifespan - Sets maximum age of a password in seconds.
- name string
- Specifies the Active Directory provider name.
- node
Dc stringAffinity - Specifies the domain controller for which the node has affinity.
- node
Dc numberAffinity Timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- nss
Enumeration boolean - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- organizational
Unit string - Specifies the organizational unit.
- reset
Schannel boolean - Resets the secure channel to the primary domain.
- restrict
Findable boolean - Check the provider for filtered lists of findable and unfindable users and groups.
- rpc
Call numberTimeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- scope string
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- server
Retry numberLimit - The number of retries attempted when a call to Active Directory fails due to network error.
- sfu
Support string - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- spns string[]
- Currently configured SPNs.
- store
Sfu booleanMappings - Stores SFU mappings permanently in the ID mapper.
- unfindable
Groups string[] - Specifies groups that cannot be resolved by the provider.
- unfindable
Users string[] - Specifies users that cannot be resolved by the provider.
- password str
- Specifies the password used during domain join.
- user str
- Specifies the user name that has permission to join a machine to the given domain.
- adsprovider_
id str - Specifies the ID of the Active Directory provider instance.
- allocate_
gids bool - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- allocate_
uids bool - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- assume_
default_ booldomain - Enables lookup of unqualified user names in the primary domain.
- authentication bool
- Enables authentication and identity management through the authentication provider.
- check_
duplicates bool - Check for duplicate SPNs registered in Active Directory.
- check_
online_ floatinterval - Specifies the time in seconds between provider online checks.
- controller_
time float - Specifies the current time for the domain controllers.
- create_
home_ booldirectory - Automatically creates a home directory on the first login.
- dns_
domain str - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- domain_
controller str - Specifies the domain controller to which the authentication service should send requests
- domain_
offline_ boolalerts - Sends an alert if the domain goes offline.
- extra_
expected_ Sequence[str]spns - List of additional SPNs to expect beyond what automatic checking routines might find
- findable_
groups Sequence[str] - Sets list of groups that can be resolved.
- findable_
users Sequence[str] - Sets list of users that can be resolved.
- groupnet str
- Groupnet identifier.
- home_
directory_ strtemplate - Specifies the path to the home directory template.
- ignore_
all_ booltrusts - If set to true, ignores all trusted domains.
- ignored_
trusted_ Sequence[str]domains - Includes trusted domains when 'ignorealltrusts' is set to false.
- include_
trusted_ Sequence[str]domains - Includes trusted domains when 'ignorealltrusts' is set to true.
- instance str
- Specifies Active Directory provider instance.
- kerberos_
hdfs_ boolspn - Determines if connecting through HDFS with Kerberos.
- kerberos_
nfs_ boolspn - Determines if connecting through NFS with Kerberos.
- ldap_
sign_ booland_ seal - Enables encryption and signing on LDAP requests.
- login_
shell str - Specifies the login shell path.
- lookup_
domains Sequence[str] - Limits user and group lookups to the specified domains.
- lookup_
groups bool - Looks up AD groups in other providers before allocating a group ID.
- lookup_
normalize_ boolgroups - Normalizes AD group names to lowercase before look up.
- lookup_
normalize_ boolusers - Normalize AD user names to lowercase before look up.
- lookup_
users bool - Looks up AD users in other providers before allocating a user ID.
- machine_
account str - Specifies the machine account name when creating a SAM account with Active Directory.
- machine_
password_ boolchanges - Enables periodic changes of the machine password for security.
- machine_
password_ floatlifespan - Sets maximum age of a password in seconds.
- name str
- Specifies the Active Directory provider name.
- node_
dc_ straffinity - Specifies the domain controller for which the node has affinity.
- node_
dc_ floataffinity_ timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- nss_
enumeration bool - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- organizational_
unit str - Specifies the organizational unit.
- reset_
schannel bool - Resets the secure channel to the primary domain.
- restrict_
findable bool - Check the provider for filtered lists of findable and unfindable users and groups.
- rpc_
call_ floattimeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- scope str
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- server_
retry_ floatlimit - The number of retries attempted when a call to Active Directory fails due to network error.
- sfu_
support str - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- spns Sequence[str]
- Currently configured SPNs.
- store_
sfu_ boolmappings - Stores SFU mappings permanently in the ID mapper.
- unfindable_
groups Sequence[str] - Specifies groups that cannot be resolved by the provider.
- unfindable_
users Sequence[str] - Specifies users that cannot be resolved by the provider.
- password String
- Specifies the password used during domain join.
- user String
- Specifies the user name that has permission to join a machine to the given domain.
- adsprovider
Id String - Specifies the ID of the Active Directory provider instance.
- allocate
Gids Boolean - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- allocate
Uids Boolean - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- assume
Default BooleanDomain - Enables lookup of unqualified user names in the primary domain.
- authentication Boolean
- Enables authentication and identity management through the authentication provider.
- check
Duplicates Boolean - Check for duplicate SPNs registered in Active Directory.
- check
Online NumberInterval - Specifies the time in seconds between provider online checks.
- controller
Time Number - Specifies the current time for the domain controllers.
- create
Home BooleanDirectory - Automatically creates a home directory on the first login.
- dns
Domain String - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- domain
Controller String - Specifies the domain controller to which the authentication service should send requests
- domain
Offline BooleanAlerts - Sends an alert if the domain goes offline.
- extra
Expected List<String>Spns - List of additional SPNs to expect beyond what automatic checking routines might find
- findable
Groups List<String> - Sets list of groups that can be resolved.
- findable
Users List<String> - Sets list of users that can be resolved.
- groupnet String
- Groupnet identifier.
- home
Directory StringTemplate - Specifies the path to the home directory template.
- ignore
All BooleanTrusts - If set to true, ignores all trusted domains.
- ignored
Trusted List<String>Domains - Includes trusted domains when 'ignorealltrusts' is set to false.
- include
Trusted List<String>Domains - Includes trusted domains when 'ignorealltrusts' is set to true.
- instance String
- Specifies Active Directory provider instance.
- kerberos
Hdfs BooleanSpn - Determines if connecting through HDFS with Kerberos.
- kerberos
Nfs BooleanSpn - Determines if connecting through NFS with Kerberos.
- ldap
Sign BooleanAnd Seal - Enables encryption and signing on LDAP requests.
- login
Shell String - Specifies the login shell path.
- lookup
Domains List<String> - Limits user and group lookups to the specified domains.
- lookup
Groups Boolean - Looks up AD groups in other providers before allocating a group ID.
- lookup
Normalize BooleanGroups - Normalizes AD group names to lowercase before look up.
- lookup
Normalize BooleanUsers - Normalize AD user names to lowercase before look up.
- lookup
Users Boolean - Looks up AD users in other providers before allocating a user ID.
- machine
Account String - Specifies the machine account name when creating a SAM account with Active Directory.
- machine
Password BooleanChanges - Enables periodic changes of the machine password for security.
- machine
Password NumberLifespan - Sets maximum age of a password in seconds.
- name String
- Specifies the Active Directory provider name.
- node
Dc StringAffinity - Specifies the domain controller for which the node has affinity.
- node
Dc NumberAffinity Timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- nss
Enumeration Boolean - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- organizational
Unit String - Specifies the organizational unit.
- reset
Schannel Boolean - Resets the secure channel to the primary domain.
- restrict
Findable Boolean - Check the provider for filtered lists of findable and unfindable users and groups.
- rpc
Call NumberTimeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- scope String
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- server
Retry NumberLimit - The number of retries attempted when a call to Active Directory fails due to network error.
- sfu
Support String - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- spns List<String>
- Currently configured SPNs.
- store
Sfu BooleanMappings - Stores SFU mappings permanently in the ID mapper.
- unfindable
Groups List<String> - Specifies groups that cannot be resolved by the provider.
- unfindable
Users List<String> - Specifies users that cannot be resolved by the provider.
Outputs
All input properties are implicitly available as output properties. Additionally, the Adsprovider resource produces the following output properties:
- Dup
Spns List<string> - Get duplicate SPNs in the provider domain
- Forest string
- Specifies the Active Directory forest.
- Hostname string
- Specifies the fully qualified hostname stored in the machine account.
- Id string
- The provider-assigned unique ID for this managed resource.
- Netbios
Domain string - Specifies the NetBIOS domain name associated with the machine account.
- Primary
Domain string - Specifies the AD domain to which the provider is joined.
- Recommended
Spns List<string> - Configuration recommended SPNs.
- Site string
- Specifies the site for the Active Directory.
- Status string
- Specifies the status of the provider.
- System bool
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- Zone
Name string - Specifies the name of the access zone in which this provider was created.
- Dup
Spns []string - Get duplicate SPNs in the provider domain
- Forest string
- Specifies the Active Directory forest.
- Hostname string
- Specifies the fully qualified hostname stored in the machine account.
- Id string
- The provider-assigned unique ID for this managed resource.
- Netbios
Domain string - Specifies the NetBIOS domain name associated with the machine account.
- Primary
Domain string - Specifies the AD domain to which the provider is joined.
- Recommended
Spns []string - Configuration recommended SPNs.
- Site string
- Specifies the site for the Active Directory.
- Status string
- Specifies the status of the provider.
- System bool
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- Zone
Name string - Specifies the name of the access zone in which this provider was created.
- dup
Spns List<String> - Get duplicate SPNs in the provider domain
- forest String
- Specifies the Active Directory forest.
- hostname String
- Specifies the fully qualified hostname stored in the machine account.
- id String
- The provider-assigned unique ID for this managed resource.
- netbios
Domain String - Specifies the NetBIOS domain name associated with the machine account.
- primary
Domain String - Specifies the AD domain to which the provider is joined.
- recommended
Spns List<String> - Configuration recommended SPNs.
- site String
- Specifies the site for the Active Directory.
- status String
- Specifies the status of the provider.
- system Boolean
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- zone
Name String - Specifies the name of the access zone in which this provider was created.
- dup
Spns string[] - Get duplicate SPNs in the provider domain
- forest string
- Specifies the Active Directory forest.
- hostname string
- Specifies the fully qualified hostname stored in the machine account.
- id string
- The provider-assigned unique ID for this managed resource.
- netbios
Domain string - Specifies the NetBIOS domain name associated with the machine account.
- primary
Domain string - Specifies the AD domain to which the provider is joined.
- recommended
Spns string[] - Configuration recommended SPNs.
- site string
- Specifies the site for the Active Directory.
- status string
- Specifies the status of the provider.
- system boolean
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- zone
Name string - Specifies the name of the access zone in which this provider was created.
- dup_
spns Sequence[str] - Get duplicate SPNs in the provider domain
- forest str
- Specifies the Active Directory forest.
- hostname str
- Specifies the fully qualified hostname stored in the machine account.
- id str
- The provider-assigned unique ID for this managed resource.
- netbios_
domain str - Specifies the NetBIOS domain name associated with the machine account.
- primary_
domain str - Specifies the AD domain to which the provider is joined.
- recommended_
spns Sequence[str] - Configuration recommended SPNs.
- site str
- Specifies the site for the Active Directory.
- status str
- Specifies the status of the provider.
- system bool
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- zone_
name str - Specifies the name of the access zone in which this provider was created.
- dup
Spns List<String> - Get duplicate SPNs in the provider domain
- forest String
- Specifies the Active Directory forest.
- hostname String
- Specifies the fully qualified hostname stored in the machine account.
- id String
- The provider-assigned unique ID for this managed resource.
- netbios
Domain String - Specifies the NetBIOS domain name associated with the machine account.
- primary
Domain String - Specifies the AD domain to which the provider is joined.
- recommended
Spns List<String> - Configuration recommended SPNs.
- site String
- Specifies the site for the Active Directory.
- status String
- Specifies the status of the provider.
- system Boolean
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- zone
Name String - Specifies the name of the access zone in which this provider was created.
Look up Existing Adsprovider Resource
Get an existing Adsprovider resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: AdsproviderState, opts?: CustomResourceOptions): Adsprovider
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
adsprovider_id: Optional[str] = None,
allocate_gids: Optional[bool] = None,
allocate_uids: Optional[bool] = None,
assume_default_domain: Optional[bool] = None,
authentication: Optional[bool] = None,
check_duplicates: Optional[bool] = None,
check_online_interval: Optional[float] = None,
controller_time: Optional[float] = None,
create_home_directory: Optional[bool] = None,
dns_domain: Optional[str] = None,
domain_controller: Optional[str] = None,
domain_offline_alerts: Optional[bool] = None,
dup_spns: Optional[Sequence[str]] = None,
extra_expected_spns: Optional[Sequence[str]] = None,
findable_groups: Optional[Sequence[str]] = None,
findable_users: Optional[Sequence[str]] = None,
forest: Optional[str] = None,
groupnet: Optional[str] = None,
home_directory_template: Optional[str] = None,
hostname: Optional[str] = None,
ignore_all_trusts: Optional[bool] = None,
ignored_trusted_domains: Optional[Sequence[str]] = None,
include_trusted_domains: Optional[Sequence[str]] = None,
instance: Optional[str] = None,
kerberos_hdfs_spn: Optional[bool] = None,
kerberos_nfs_spn: Optional[bool] = None,
ldap_sign_and_seal: Optional[bool] = None,
login_shell: Optional[str] = None,
lookup_domains: Optional[Sequence[str]] = None,
lookup_groups: Optional[bool] = None,
lookup_normalize_groups: Optional[bool] = None,
lookup_normalize_users: Optional[bool] = None,
lookup_users: Optional[bool] = None,
machine_account: Optional[str] = None,
machine_password_changes: Optional[bool] = None,
machine_password_lifespan: Optional[float] = None,
name: Optional[str] = None,
netbios_domain: Optional[str] = None,
node_dc_affinity: Optional[str] = None,
node_dc_affinity_timeout: Optional[float] = None,
nss_enumeration: Optional[bool] = None,
organizational_unit: Optional[str] = None,
password: Optional[str] = None,
primary_domain: Optional[str] = None,
recommended_spns: Optional[Sequence[str]] = None,
reset_schannel: Optional[bool] = None,
restrict_findable: Optional[bool] = None,
rpc_call_timeout: Optional[float] = None,
scope: Optional[str] = None,
server_retry_limit: Optional[float] = None,
sfu_support: Optional[str] = None,
site: Optional[str] = None,
spns: Optional[Sequence[str]] = None,
status: Optional[str] = None,
store_sfu_mappings: Optional[bool] = None,
system: Optional[bool] = None,
unfindable_groups: Optional[Sequence[str]] = None,
unfindable_users: Optional[Sequence[str]] = None,
user: Optional[str] = None,
zone_name: Optional[str] = None) -> Adsprovider
func GetAdsprovider(ctx *Context, name string, id IDInput, state *AdsproviderState, opts ...ResourceOption) (*Adsprovider, error)
public static Adsprovider Get(string name, Input<string> id, AdsproviderState? state, CustomResourceOptions? opts = null)
public static Adsprovider get(String name, Output<String> id, AdsproviderState state, CustomResourceOptions options)
resources: _: type: powerscale:Adsprovider get: id: ${id}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Adsprovider
Id string - Specifies the ID of the Active Directory provider instance.
- Allocate
Gids bool - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- Allocate
Uids bool - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- Assume
Default boolDomain - Enables lookup of unqualified user names in the primary domain.
- Authentication bool
- Enables authentication and identity management through the authentication provider.
- Check
Duplicates bool - Check for duplicate SPNs registered in Active Directory.
- Check
Online doubleInterval - Specifies the time in seconds between provider online checks.
- Controller
Time double - Specifies the current time for the domain controllers.
- Create
Home boolDirectory - Automatically creates a home directory on the first login.
- Dns
Domain string - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- Domain
Controller string - Specifies the domain controller to which the authentication service should send requests
- Domain
Offline boolAlerts - Sends an alert if the domain goes offline.
- Dup
Spns List<string> - Get duplicate SPNs in the provider domain
- Extra
Expected List<string>Spns - List of additional SPNs to expect beyond what automatic checking routines might find
- Findable
Groups List<string> - Sets list of groups that can be resolved.
- Findable
Users List<string> - Sets list of users that can be resolved.
- Forest string
- Specifies the Active Directory forest.
- Groupnet string
- Groupnet identifier.
- Home
Directory stringTemplate - Specifies the path to the home directory template.
- Hostname string
- Specifies the fully qualified hostname stored in the machine account.
- Ignore
All boolTrusts - If set to true, ignores all trusted domains.
- Ignored
Trusted List<string>Domains - Includes trusted domains when 'ignorealltrusts' is set to false.
- Include
Trusted List<string>Domains - Includes trusted domains when 'ignorealltrusts' is set to true.
- Instance string
- Specifies Active Directory provider instance.
- Kerberos
Hdfs boolSpn - Determines if connecting through HDFS with Kerberos.
- Kerberos
Nfs boolSpn - Determines if connecting through NFS with Kerberos.
- Ldap
Sign boolAnd Seal - Enables encryption and signing on LDAP requests.
- Login
Shell string - Specifies the login shell path.
- Lookup
Domains List<string> - Limits user and group lookups to the specified domains.
- Lookup
Groups bool - Looks up AD groups in other providers before allocating a group ID.
- Lookup
Normalize boolGroups - Normalizes AD group names to lowercase before look up.
- Lookup
Normalize boolUsers - Normalize AD user names to lowercase before look up.
- Lookup
Users bool - Looks up AD users in other providers before allocating a user ID.
- Machine
Account string - Specifies the machine account name when creating a SAM account with Active Directory.
- Machine
Password boolChanges - Enables periodic changes of the machine password for security.
- Machine
Password doubleLifespan - Sets maximum age of a password in seconds.
- Name string
- Specifies the Active Directory provider name.
- Netbios
Domain string - Specifies the NetBIOS domain name associated with the machine account.
- Node
Dc stringAffinity - Specifies the domain controller for which the node has affinity.
- Node
Dc doubleAffinity Timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- Nss
Enumeration bool - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- Organizational
Unit string - Specifies the organizational unit.
- Password string
- Specifies the password used during domain join.
- Primary
Domain string - Specifies the AD domain to which the provider is joined.
- Recommended
Spns List<string> - Configuration recommended SPNs.
- Reset
Schannel bool - Resets the secure channel to the primary domain.
- Restrict
Findable bool - Check the provider for filtered lists of findable and unfindable users and groups.
- Rpc
Call doubleTimeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- Scope string
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- Server
Retry doubleLimit - The number of retries attempted when a call to Active Directory fails due to network error.
- Sfu
Support string - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- Site string
- Specifies the site for the Active Directory.
- Spns List<string>
- Currently configured SPNs.
- Status string
- Specifies the status of the provider.
- Store
Sfu boolMappings - Stores SFU mappings permanently in the ID mapper.
- System bool
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- Unfindable
Groups List<string> - Specifies groups that cannot be resolved by the provider.
- Unfindable
Users List<string> - Specifies users that cannot be resolved by the provider.
- User string
- Specifies the user name that has permission to join a machine to the given domain.
- Zone
Name string - Specifies the name of the access zone in which this provider was created.
- Adsprovider
Id string - Specifies the ID of the Active Directory provider instance.
- Allocate
Gids bool - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- Allocate
Uids bool - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- Assume
Default boolDomain - Enables lookup of unqualified user names in the primary domain.
- Authentication bool
- Enables authentication and identity management through the authentication provider.
- Check
Duplicates bool - Check for duplicate SPNs registered in Active Directory.
- Check
Online float64Interval - Specifies the time in seconds between provider online checks.
- Controller
Time float64 - Specifies the current time for the domain controllers.
- Create
Home boolDirectory - Automatically creates a home directory on the first login.
- Dns
Domain string - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- Domain
Controller string - Specifies the domain controller to which the authentication service should send requests
- Domain
Offline boolAlerts - Sends an alert if the domain goes offline.
- Dup
Spns []string - Get duplicate SPNs in the provider domain
- Extra
Expected []stringSpns - List of additional SPNs to expect beyond what automatic checking routines might find
- Findable
Groups []string - Sets list of groups that can be resolved.
- Findable
Users []string - Sets list of users that can be resolved.
- Forest string
- Specifies the Active Directory forest.
- Groupnet string
- Groupnet identifier.
- Home
Directory stringTemplate - Specifies the path to the home directory template.
- Hostname string
- Specifies the fully qualified hostname stored in the machine account.
- Ignore
All boolTrusts - If set to true, ignores all trusted domains.
- Ignored
Trusted []stringDomains - Includes trusted domains when 'ignorealltrusts' is set to false.
- Include
Trusted []stringDomains - Includes trusted domains when 'ignorealltrusts' is set to true.
- Instance string
- Specifies Active Directory provider instance.
- Kerberos
Hdfs boolSpn - Determines if connecting through HDFS with Kerberos.
- Kerberos
Nfs boolSpn - Determines if connecting through NFS with Kerberos.
- Ldap
Sign boolAnd Seal - Enables encryption and signing on LDAP requests.
- Login
Shell string - Specifies the login shell path.
- Lookup
Domains []string - Limits user and group lookups to the specified domains.
- Lookup
Groups bool - Looks up AD groups in other providers before allocating a group ID.
- Lookup
Normalize boolGroups - Normalizes AD group names to lowercase before look up.
- Lookup
Normalize boolUsers - Normalize AD user names to lowercase before look up.
- Lookup
Users bool - Looks up AD users in other providers before allocating a user ID.
- Machine
Account string - Specifies the machine account name when creating a SAM account with Active Directory.
- Machine
Password boolChanges - Enables periodic changes of the machine password for security.
- Machine
Password float64Lifespan - Sets maximum age of a password in seconds.
- Name string
- Specifies the Active Directory provider name.
- Netbios
Domain string - Specifies the NetBIOS domain name associated with the machine account.
- Node
Dc stringAffinity - Specifies the domain controller for which the node has affinity.
- Node
Dc float64Affinity Timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- Nss
Enumeration bool - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- Organizational
Unit string - Specifies the organizational unit.
- Password string
- Specifies the password used during domain join.
- Primary
Domain string - Specifies the AD domain to which the provider is joined.
- Recommended
Spns []string - Configuration recommended SPNs.
- Reset
Schannel bool - Resets the secure channel to the primary domain.
- Restrict
Findable bool - Check the provider for filtered lists of findable and unfindable users and groups.
- Rpc
Call float64Timeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- Scope string
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- Server
Retry float64Limit - The number of retries attempted when a call to Active Directory fails due to network error.
- Sfu
Support string - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- Site string
- Specifies the site for the Active Directory.
- Spns []string
- Currently configured SPNs.
- Status string
- Specifies the status of the provider.
- Store
Sfu boolMappings - Stores SFU mappings permanently in the ID mapper.
- System bool
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- Unfindable
Groups []string - Specifies groups that cannot be resolved by the provider.
- Unfindable
Users []string - Specifies users that cannot be resolved by the provider.
- User string
- Specifies the user name that has permission to join a machine to the given domain.
- Zone
Name string - Specifies the name of the access zone in which this provider was created.
- adsprovider
Id String - Specifies the ID of the Active Directory provider instance.
- allocate
Gids Boolean - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- allocate
Uids Boolean - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- assume
Default BooleanDomain - Enables lookup of unqualified user names in the primary domain.
- authentication Boolean
- Enables authentication and identity management through the authentication provider.
- check
Duplicates Boolean - Check for duplicate SPNs registered in Active Directory.
- check
Online DoubleInterval - Specifies the time in seconds between provider online checks.
- controller
Time Double - Specifies the current time for the domain controllers.
- create
Home BooleanDirectory - Automatically creates a home directory on the first login.
- dns
Domain String - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- domain
Controller String - Specifies the domain controller to which the authentication service should send requests
- domain
Offline BooleanAlerts - Sends an alert if the domain goes offline.
- dup
Spns List<String> - Get duplicate SPNs in the provider domain
- extra
Expected List<String>Spns - List of additional SPNs to expect beyond what automatic checking routines might find
- findable
Groups List<String> - Sets list of groups that can be resolved.
- findable
Users List<String> - Sets list of users that can be resolved.
- forest String
- Specifies the Active Directory forest.
- groupnet String
- Groupnet identifier.
- home
Directory StringTemplate - Specifies the path to the home directory template.
- hostname String
- Specifies the fully qualified hostname stored in the machine account.
- ignore
All BooleanTrusts - If set to true, ignores all trusted domains.
- ignored
Trusted List<String>Domains - Includes trusted domains when 'ignorealltrusts' is set to false.
- include
Trusted List<String>Domains - Includes trusted domains when 'ignorealltrusts' is set to true.
- instance String
- Specifies Active Directory provider instance.
- kerberos
Hdfs BooleanSpn - Determines if connecting through HDFS with Kerberos.
- kerberos
Nfs BooleanSpn - Determines if connecting through NFS with Kerberos.
- ldap
Sign BooleanAnd Seal - Enables encryption and signing on LDAP requests.
- login
Shell String - Specifies the login shell path.
- lookup
Domains List<String> - Limits user and group lookups to the specified domains.
- lookup
Groups Boolean - Looks up AD groups in other providers before allocating a group ID.
- lookup
Normalize BooleanGroups - Normalizes AD group names to lowercase before look up.
- lookup
Normalize BooleanUsers - Normalize AD user names to lowercase before look up.
- lookup
Users Boolean - Looks up AD users in other providers before allocating a user ID.
- machine
Account String - Specifies the machine account name when creating a SAM account with Active Directory.
- machine
Password BooleanChanges - Enables periodic changes of the machine password for security.
- machine
Password DoubleLifespan - Sets maximum age of a password in seconds.
- name String
- Specifies the Active Directory provider name.
- netbios
Domain String - Specifies the NetBIOS domain name associated with the machine account.
- node
Dc StringAffinity - Specifies the domain controller for which the node has affinity.
- node
Dc DoubleAffinity Timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- nss
Enumeration Boolean - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- organizational
Unit String - Specifies the organizational unit.
- password String
- Specifies the password used during domain join.
- primary
Domain String - Specifies the AD domain to which the provider is joined.
- recommended
Spns List<String> - Configuration recommended SPNs.
- reset
Schannel Boolean - Resets the secure channel to the primary domain.
- restrict
Findable Boolean - Check the provider for filtered lists of findable and unfindable users and groups.
- rpc
Call DoubleTimeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- scope String
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- server
Retry DoubleLimit - The number of retries attempted when a call to Active Directory fails due to network error.
- sfu
Support String - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- site String
- Specifies the site for the Active Directory.
- spns List<String>
- Currently configured SPNs.
- status String
- Specifies the status of the provider.
- store
Sfu BooleanMappings - Stores SFU mappings permanently in the ID mapper.
- system Boolean
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- unfindable
Groups List<String> - Specifies groups that cannot be resolved by the provider.
- unfindable
Users List<String> - Specifies users that cannot be resolved by the provider.
- user String
- Specifies the user name that has permission to join a machine to the given domain.
- zone
Name String - Specifies the name of the access zone in which this provider was created.
- adsprovider
Id string - Specifies the ID of the Active Directory provider instance.
- allocate
Gids boolean - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- allocate
Uids boolean - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- assume
Default booleanDomain - Enables lookup of unqualified user names in the primary domain.
- authentication boolean
- Enables authentication and identity management through the authentication provider.
- check
Duplicates boolean - Check for duplicate SPNs registered in Active Directory.
- check
Online numberInterval - Specifies the time in seconds between provider online checks.
- controller
Time number - Specifies the current time for the domain controllers.
- create
Home booleanDirectory - Automatically creates a home directory on the first login.
- dns
Domain string - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- domain
Controller string - Specifies the domain controller to which the authentication service should send requests
- domain
Offline booleanAlerts - Sends an alert if the domain goes offline.
- dup
Spns string[] - Get duplicate SPNs in the provider domain
- extra
Expected string[]Spns - List of additional SPNs to expect beyond what automatic checking routines might find
- findable
Groups string[] - Sets list of groups that can be resolved.
- findable
Users string[] - Sets list of users that can be resolved.
- forest string
- Specifies the Active Directory forest.
- groupnet string
- Groupnet identifier.
- home
Directory stringTemplate - Specifies the path to the home directory template.
- hostname string
- Specifies the fully qualified hostname stored in the machine account.
- ignore
All booleanTrusts - If set to true, ignores all trusted domains.
- ignored
Trusted string[]Domains - Includes trusted domains when 'ignorealltrusts' is set to false.
- include
Trusted string[]Domains - Includes trusted domains when 'ignorealltrusts' is set to true.
- instance string
- Specifies Active Directory provider instance.
- kerberos
Hdfs booleanSpn - Determines if connecting through HDFS with Kerberos.
- kerberos
Nfs booleanSpn - Determines if connecting through NFS with Kerberos.
- ldap
Sign booleanAnd Seal - Enables encryption and signing on LDAP requests.
- login
Shell string - Specifies the login shell path.
- lookup
Domains string[] - Limits user and group lookups to the specified domains.
- lookup
Groups boolean - Looks up AD groups in other providers before allocating a group ID.
- lookup
Normalize booleanGroups - Normalizes AD group names to lowercase before look up.
- lookup
Normalize booleanUsers - Normalize AD user names to lowercase before look up.
- lookup
Users boolean - Looks up AD users in other providers before allocating a user ID.
- machine
Account string - Specifies the machine account name when creating a SAM account with Active Directory.
- machine
Password booleanChanges - Enables periodic changes of the machine password for security.
- machine
Password numberLifespan - Sets maximum age of a password in seconds.
- name string
- Specifies the Active Directory provider name.
- netbios
Domain string - Specifies the NetBIOS domain name associated with the machine account.
- node
Dc stringAffinity - Specifies the domain controller for which the node has affinity.
- node
Dc numberAffinity Timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- nss
Enumeration boolean - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- organizational
Unit string - Specifies the organizational unit.
- password string
- Specifies the password used during domain join.
- primary
Domain string - Specifies the AD domain to which the provider is joined.
- recommended
Spns string[] - Configuration recommended SPNs.
- reset
Schannel boolean - Resets the secure channel to the primary domain.
- restrict
Findable boolean - Check the provider for filtered lists of findable and unfindable users and groups.
- rpc
Call numberTimeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- scope string
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- server
Retry numberLimit - The number of retries attempted when a call to Active Directory fails due to network error.
- sfu
Support string - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- site string
- Specifies the site for the Active Directory.
- spns string[]
- Currently configured SPNs.
- status string
- Specifies the status of the provider.
- store
Sfu booleanMappings - Stores SFU mappings permanently in the ID mapper.
- system boolean
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- unfindable
Groups string[] - Specifies groups that cannot be resolved by the provider.
- unfindable
Users string[] - Specifies users that cannot be resolved by the provider.
- user string
- Specifies the user name that has permission to join a machine to the given domain.
- zone
Name string - Specifies the name of the access zone in which this provider was created.
- adsprovider_
id str - Specifies the ID of the Active Directory provider instance.
- allocate_
gids bool - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- allocate_
uids bool - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- assume_
default_ booldomain - Enables lookup of unqualified user names in the primary domain.
- authentication bool
- Enables authentication and identity management through the authentication provider.
- check_
duplicates bool - Check for duplicate SPNs registered in Active Directory.
- check_
online_ floatinterval - Specifies the time in seconds between provider online checks.
- controller_
time float - Specifies the current time for the domain controllers.
- create_
home_ booldirectory - Automatically creates a home directory on the first login.
- dns_
domain str - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- domain_
controller str - Specifies the domain controller to which the authentication service should send requests
- domain_
offline_ boolalerts - Sends an alert if the domain goes offline.
- dup_
spns Sequence[str] - Get duplicate SPNs in the provider domain
- extra_
expected_ Sequence[str]spns - List of additional SPNs to expect beyond what automatic checking routines might find
- findable_
groups Sequence[str] - Sets list of groups that can be resolved.
- findable_
users Sequence[str] - Sets list of users that can be resolved.
- forest str
- Specifies the Active Directory forest.
- groupnet str
- Groupnet identifier.
- home_
directory_ strtemplate - Specifies the path to the home directory template.
- hostname str
- Specifies the fully qualified hostname stored in the machine account.
- ignore_
all_ booltrusts - If set to true, ignores all trusted domains.
- ignored_
trusted_ Sequence[str]domains - Includes trusted domains when 'ignorealltrusts' is set to false.
- include_
trusted_ Sequence[str]domains - Includes trusted domains when 'ignorealltrusts' is set to true.
- instance str
- Specifies Active Directory provider instance.
- kerberos_
hdfs_ boolspn - Determines if connecting through HDFS with Kerberos.
- kerberos_
nfs_ boolspn - Determines if connecting through NFS with Kerberos.
- ldap_
sign_ booland_ seal - Enables encryption and signing on LDAP requests.
- login_
shell str - Specifies the login shell path.
- lookup_
domains Sequence[str] - Limits user and group lookups to the specified domains.
- lookup_
groups bool - Looks up AD groups in other providers before allocating a group ID.
- lookup_
normalize_ boolgroups - Normalizes AD group names to lowercase before look up.
- lookup_
normalize_ boolusers - Normalize AD user names to lowercase before look up.
- lookup_
users bool - Looks up AD users in other providers before allocating a user ID.
- machine_
account str - Specifies the machine account name when creating a SAM account with Active Directory.
- machine_
password_ boolchanges - Enables periodic changes of the machine password for security.
- machine_
password_ floatlifespan - Sets maximum age of a password in seconds.
- name str
- Specifies the Active Directory provider name.
- netbios_
domain str - Specifies the NetBIOS domain name associated with the machine account.
- node_
dc_ straffinity - Specifies the domain controller for which the node has affinity.
- node_
dc_ floataffinity_ timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- nss_
enumeration bool - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- organizational_
unit str - Specifies the organizational unit.
- password str
- Specifies the password used during domain join.
- primary_
domain str - Specifies the AD domain to which the provider is joined.
- recommended_
spns Sequence[str] - Configuration recommended SPNs.
- reset_
schannel bool - Resets the secure channel to the primary domain.
- restrict_
findable bool - Check the provider for filtered lists of findable and unfindable users and groups.
- rpc_
call_ floattimeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- scope str
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- server_
retry_ floatlimit - The number of retries attempted when a call to Active Directory fails due to network error.
- sfu_
support str - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- site str
- Specifies the site for the Active Directory.
- spns Sequence[str]
- Currently configured SPNs.
- status str
- Specifies the status of the provider.
- store_
sfu_ boolmappings - Stores SFU mappings permanently in the ID mapper.
- system bool
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- unfindable_
groups Sequence[str] - Specifies groups that cannot be resolved by the provider.
- unfindable_
users Sequence[str] - Specifies users that cannot be resolved by the provider.
- user str
- Specifies the user name that has permission to join a machine to the given domain.
- zone_
name str - Specifies the name of the access zone in which this provider was created.
- adsprovider
Id String - Specifies the ID of the Active Directory provider instance.
- allocate
Gids Boolean - Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
- allocate
Uids Boolean - Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
- assume
Default BooleanDomain - Enables lookup of unqualified user names in the primary domain.
- authentication Boolean
- Enables authentication and identity management through the authentication provider.
- check
Duplicates Boolean - Check for duplicate SPNs registered in Active Directory.
- check
Online NumberInterval - Specifies the time in seconds between provider online checks.
- controller
Time Number - Specifies the current time for the domain controllers.
- create
Home BooleanDirectory - Automatically creates a home directory on the first login.
- dns
Domain String - Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
- domain
Controller String - Specifies the domain controller to which the authentication service should send requests
- domain
Offline BooleanAlerts - Sends an alert if the domain goes offline.
- dup
Spns List<String> - Get duplicate SPNs in the provider domain
- extra
Expected List<String>Spns - List of additional SPNs to expect beyond what automatic checking routines might find
- findable
Groups List<String> - Sets list of groups that can be resolved.
- findable
Users List<String> - Sets list of users that can be resolved.
- forest String
- Specifies the Active Directory forest.
- groupnet String
- Groupnet identifier.
- home
Directory StringTemplate - Specifies the path to the home directory template.
- hostname String
- Specifies the fully qualified hostname stored in the machine account.
- ignore
All BooleanTrusts - If set to true, ignores all trusted domains.
- ignored
Trusted List<String>Domains - Includes trusted domains when 'ignorealltrusts' is set to false.
- include
Trusted List<String>Domains - Includes trusted domains when 'ignorealltrusts' is set to true.
- instance String
- Specifies Active Directory provider instance.
- kerberos
Hdfs BooleanSpn - Determines if connecting through HDFS with Kerberos.
- kerberos
Nfs BooleanSpn - Determines if connecting through NFS with Kerberos.
- ldap
Sign BooleanAnd Seal - Enables encryption and signing on LDAP requests.
- login
Shell String - Specifies the login shell path.
- lookup
Domains List<String> - Limits user and group lookups to the specified domains.
- lookup
Groups Boolean - Looks up AD groups in other providers before allocating a group ID.
- lookup
Normalize BooleanGroups - Normalizes AD group names to lowercase before look up.
- lookup
Normalize BooleanUsers - Normalize AD user names to lowercase before look up.
- lookup
Users Boolean - Looks up AD users in other providers before allocating a user ID.
- machine
Account String - Specifies the machine account name when creating a SAM account with Active Directory.
- machine
Password BooleanChanges - Enables periodic changes of the machine password for security.
- machine
Password NumberLifespan - Sets maximum age of a password in seconds.
- name String
- Specifies the Active Directory provider name.
- netbios
Domain String - Specifies the NetBIOS domain name associated with the machine account.
- node
Dc StringAffinity - Specifies the domain controller for which the node has affinity.
- node
Dc NumberAffinity Timeout - Specifies the timeout for the domain controller for which the local node has affinity.
- nss
Enumeration Boolean - Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
- organizational
Unit String - Specifies the organizational unit.
- password String
- Specifies the password used during domain join.
- primary
Domain String - Specifies the AD domain to which the provider is joined.
- recommended
Spns List<String> - Configuration recommended SPNs.
- reset
Schannel Boolean - Resets the secure channel to the primary domain.
- restrict
Findable Boolean - Check the provider for filtered lists of findable and unfindable users and groups.
- rpc
Call NumberTimeout - The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
- scope String
- When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
- server
Retry NumberLimit - The number of retries attempted when a call to Active Directory fails due to network error.
- sfu
Support String - Specifies whether to support RFC 2307 attributes on ADS domain controllers.
- site String
- Specifies the site for the Active Directory.
- spns List<String>
- Currently configured SPNs.
- status String
- Specifies the status of the provider.
- store
Sfu BooleanMappings - Stores SFU mappings permanently in the ID mapper.
- system Boolean
- If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
- unfindable
Groups List<String> - Specifies groups that cannot be resolved by the provider.
- unfindable
Users List<String> - Specifies users that cannot be resolved by the provider.
- user String
- Specifies the user name that has permission to join a machine to the given domain.
- zone
Name String - Specifies the name of the access zone in which this provider was created.
Import
Copyright (c) 2023-2024 Dell Inc., or its subsidiaries. All Rights Reserved.
Licensed under the Mozilla Public License Version 2.0 (the “License”);
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://mozilla.org/MPL/2.0/
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an “AS IS” BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
The command is
$ pulumi import powerscale:index/adsprovider:Adsprovider ads_test <name>
Example:
$ pulumi import powerscale:index/adsprovider:Adsprovider ads_test ads_id
after running this command, populate the name field and other required parameters in the config file to start managing this resource.
Note: running “terraform show” after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- powerscale dell/terraform-provider-powerscale
- License
- Notes
- This Pulumi package is based on the
powerscale
Terraform Provider.