Skip to content

Commit 9c8180e

Browse files
authored
Add documentation for exclude_roles settings for LDAP security config (#6399)
* Add documentation for exclude_roles settings for LDAP security config Signed-off-by: Craig Perkins <[email protected]> * Match skip_users language Signed-off-by: Craig Perkins <[email protected]> --------- Signed-off-by: Craig Perkins <[email protected]>
1 parent f283585 commit 9c8180e

File tree

1 file changed

+1
-0
lines changed
  • _security/authentication-backends

1 file changed

+1
-0
lines changed

_security/authentication-backends/ldap.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -509,6 +509,7 @@ Name | Description
509509
`resolve_nested_roles` | Boolean. Whether or not to resolve nested roles. Default is `false`.
510510
`max_nested_depth` | Integer. When `resolve_nested_roles` is `true`, this defines the maximum number of nested roles to traverse. Setting smaller values can reduce the amount of data retrieved from LDAP and improve authentication times at the cost of failing to discover deeply nested roles. Default is `30`.
511511
`skip_users` | Array of users that should be skipped when retrieving roles. Wildcards and regular expressions are supported.
512+
`exclude_roles` | Array of roles that should be excluded when retrieving roles. Wildcards are supported.
512513
`nested_role_filter` | Array of role DNs that should be filtered before resolving nested roles. Wildcards and regular expressions are supported.
513514
`rolesearch_enabled` | Boolean. Enable or disable the role search. Default is `true`.
514515
`custom_attr_allowlist` | String array. Specifies the LDAP attributes that should be made available for variable substitution.

0 commit comments

Comments
 (0)