Skip to main content

domains_ldapssettings

Creates, updates, deletes, gets or lists a domains_ldapssettings resource.

Overview

Namedomains_ldapssettings
TypeResource
Idgoogle.managedidentities.domains_ldapssettings

Fields

NameDatatypeDescription
namestringThe resource name of the LDAPS settings. Uses the form: projects/{project}/locations/{location}/domains/{domain}.
certificateobjectCertificate used to configure LDAPS.
certificatePasswordstringInput only. The password used to encrypt the uploaded PFX certificate.
certificatePfxstringInput only. The uploaded PKCS12-formatted certificate to configure LDAPS with. It will enable the domain controllers in this domain to accept LDAPS connections (either LDAP over SSL/TLS or the StartTLS operation). A valid certificate chain must form a valid x.509 certificate chain (or be comprised of a single self-signed certificate. It must be encrypted with either: 1) PBES2 + PBKDF2 + AES256 encryption and SHA256 PRF; or 2) pbeWithSHA1And3-KeyTripleDES-CBC Private key must be included for the leaf / single self-signed certificate. Note: For a fqdn your-example-domain.com, the wildcard fqdn is *.your-example-domain.com. Specifically the leaf certificate must have: - Either a blank subject or a subject with CN matching the wildcard fqdn. - Exactly two SANs - the fqdn and wildcard fqdn. - Encipherment and digital key signature key usages. - Server authentication extended key usage (OID=1.3.6.1.5.5.7.3.1) - Private key must be in one of the following formats: RSA, ECDSA, ED25519. - Private key must have appropriate key length: 2048 for RSA, 256 for ECDSA - Signature algorithm of the leaf certificate cannot be MD2, MD5 or SHA1.
statestringOutput only. The current state of this LDAPS settings.
updateTimestringOutput only. Last update time.

Methods

NameAccessible byRequired ParamsDescription
get_ldapssettingsSELECTdomainsId, projectsIdGets the domain ldaps settings.
update_ldapssettingsUPDATEdomainsId, projectsIdPatches a single ldaps settings.

SELECT examples

Gets the domain ldaps settings.

SELECT
name,
certificate,
certificatePassword,
certificatePfx,
state,
updateTime
FROM google.managedidentities.domains_ldapssettings
WHERE domainsId = '{{ domainsId }}'
AND projectsId = '{{ projectsId }}';

UPDATE example

Updates a domains_ldapssettings resource.

/*+ update */
UPDATE google.managedidentities.domains_ldapssettings
SET
name = '{{ name }}',
certificatePfx = '{{ certificatePfx }}',
certificatePassword = '{{ certificatePassword }}'
WHERE
domainsId = '{{ domainsId }}'
AND projectsId = '{{ projectsId }}';