Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. ObjectUserLdapDynamicMapping
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectUserLdapDynamicMapping

Explore with Pulumi AI

fortimanager logo
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

    Configure LDAP server entries.

    This resource is a sub resource for variable dynamic_mapping of resource fortimanager.ObjectUserLdap. Conflict and overwrite may occur if use both of them.

    Create ObjectUserLdapDynamicMapping Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ObjectUserLdapDynamicMapping(name: string, args: ObjectUserLdapDynamicMappingArgs, opts?: CustomResourceOptions);
    @overload
def ObjectUserLdapDynamicMapping(resource_name: str,
                                 args: ObjectUserLdapDynamicMappingInitArgs,
                                 opts: Optional[ResourceOptions] = None)

@overload
def ObjectUserLdapDynamicMapping(resource_name: str,
                                 opts: Optional[ResourceOptions] = None,
                                 ldap: Optional[str] = None,
                                 _scopes: Optional[Sequence[ObjectUserLdapDynamicMapping_ScopeArgs]] = None,
                                 account_key_cert_field: Optional[str] = None,
                                 account_key_filter: Optional[str] = None,
                                 account_key_name: Optional[str] = None,
                                 account_key_processing: Optional[str] = None,
                                 account_key_upn_san: Optional[str] = None,
                                 adom: Optional[str] = None,
                                 antiphish: Optional[str] = None,
                                 ca_cert: Optional[str] = None,
                                 client_cert_auth: Optional[str] = None,
                                 client_certs: Optional[Sequence[str]] = None,
                                 cnid: Optional[str] = None,
                                 dn: Optional[str] = None,
                                 dynamic_sort_subtable: Optional[str] = None,
                                 filter: Optional[str] = None,
                                 group: Optional[str] = None,
                                 group_filter: Optional[str] = None,
                                 group_member_check: Optional[str] = None,
                                 group_object_filter: Optional[str] = None,
                                 group_object_search_base: Optional[str] = None,
                                 group_search_base: Optional[str] = None,
                                 interface: Optional[str] = None,
                                 interface_select_method: Optional[str] = None,
                                 max_connections: Optional[float] = None,
                                 member_attr: Optional[str] = None,
                                 object_user_ldap_dynamic_mapping_id: Optional[str] = None,
                                 obtain_user_info: Optional[str] = None,
                                 password_attr: Optional[str] = None,
                                 password_expiry_warning: Optional[str] = None,
                                 password_renewal: Optional[str] = None,
                                 passwords: Optional[Sequence[str]] = None,
                                 port: Optional[float] = None,
                                 retrieve_protection_profile: Optional[str] = None,
                                 scopetype: Optional[str] = None,
                                 search_types: Optional[Sequence[str]] = None,
                                 secondary_server: Optional[str] = None,
                                 secure: Optional[str] = None,
                                 server: Optional[str] = None,
                                 server_identity_check: Optional[str] = None,
                                 source_ip: Optional[str] = None,
                                 source_ip_interfaces: Optional[Sequence[str]] = None,
                                 source_port: Optional[float] = None,
                                 ssl_max_proto_version: Optional[str] = None,
                                 ssl_min_proto_version: Optional[str] = None,
                                 status_ttl: Optional[float] = None,
                                 tertiary_server: Optional[str] = None,
                                 two_factor: Optional[str] = None,
                                 two_factor_authentication: Optional[str] = None,
                                 two_factor_filter: Optional[str] = None,
                                 two_factor_notification: Optional[str] = None,
                                 type: Optional[str] = None,
                                 user_info_exchange_server: Optional[str] = None,
                                 username: Optional[str] = None)
    func NewObjectUserLdapDynamicMapping(ctx *Context, name string, args ObjectUserLdapDynamicMappingArgs, opts ...ResourceOption) (*ObjectUserLdapDynamicMapping, error)
    public ObjectUserLdapDynamicMapping(string name, ObjectUserLdapDynamicMappingArgs args, CustomResourceOptions? opts = null)
    public ObjectUserLdapDynamicMapping(String name, ObjectUserLdapDynamicMappingArgs args)
public ObjectUserLdapDynamicMapping(String name, ObjectUserLdapDynamicMappingArgs args, CustomResourceOptions options)

    type: fortimanager:ObjectUserLdapDynamicMapping
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ObjectUserLdapDynamicMappingArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ObjectUserLdapDynamicMappingInitArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ObjectUserLdapDynamicMappingArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ObjectUserLdapDynamicMappingArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ObjectUserLdapDynamicMappingArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var objectUserLdapDynamicMappingResource = new Fortimanager.ObjectUserLdapDynamicMapping("objectUserLdapDynamicMappingResource", new()
{
    Ldap = "string",
    _scopes = new[]
    {
        new Fortimanager.Inputs.ObjectUserLdapDynamicMapping_ScopeArgs
        {
            Name = "string",
            Vdom = "string",
        },
    },
    AccountKeyCertField = "string",
    AccountKeyFilter = "string",
    AccountKeyName = "string",
    AccountKeyProcessing = "string",
    AccountKeyUpnSan = "string",
    Adom = "string",
    Antiphish = "string",
    CaCert = "string",
    ClientCertAuth = "string",
    ClientCerts = new[]
    {
        "string",
    },
    Cnid = "string",
    Dn = "string",
    DynamicSortSubtable = "string",
    Filter = "string",
    Group = "string",
    GroupFilter = "string",
    GroupMemberCheck = "string",
    GroupObjectFilter = "string",
    GroupObjectSearchBase = "string",
    GroupSearchBase = "string",
    Interface = "string",
    InterfaceSelectMethod = "string",
    MaxConnections = 0,
    MemberAttr = "string",
    ObjectUserLdapDynamicMappingId = "string",
    ObtainUserInfo = "string",
    PasswordAttr = "string",
    PasswordExpiryWarning = "string",
    PasswordRenewal = "string",
    Passwords = new[]
    {
        "string",
    },
    Port = 0,
    RetrieveProtectionProfile = "string",
    Scopetype = "string",
    SearchTypes = new[]
    {
        "string",
    },
    SecondaryServer = "string",
    Secure = "string",
    Server = "string",
    ServerIdentityCheck = "string",
    SourceIp = "string",
    SourceIpInterfaces = new[]
    {
        "string",
    },
    SourcePort = 0,
    SslMaxProtoVersion = "string",
    SslMinProtoVersion = "string",
    StatusTtl = 0,
    TertiaryServer = "string",
    TwoFactor = "string",
    TwoFactorAuthentication = "string",
    TwoFactorFilter = "string",
    TwoFactorNotification = "string",
    Type = "string",
    UserInfoExchangeServer = "string",
    Username = "string",
});

    example, err := fortimanager.NewObjectUserLdapDynamicMapping(ctx, "objectUserLdapDynamicMappingResource", &fortimanager.ObjectUserLdapDynamicMappingArgs{
Ldap: pulumi.String("string"),
_scopes: .ObjectUserLdapDynamicMapping_ScopeArray{
&.ObjectUserLdapDynamicMapping_ScopeArgs{
Name: pulumi.String("string"),
Vdom: pulumi.String("string"),
},
},
AccountKeyCertField: pulumi.String("string"),
AccountKeyFilter: pulumi.String("string"),
AccountKeyName: pulumi.String("string"),
AccountKeyProcessing: pulumi.String("string"),
AccountKeyUpnSan: pulumi.String("string"),
Adom: pulumi.String("string"),
Antiphish: pulumi.String("string"),
CaCert: pulumi.String("string"),
ClientCertAuth: pulumi.String("string"),
ClientCerts: pulumi.StringArray{
pulumi.String("string"),
},
Cnid: pulumi.String("string"),
Dn: pulumi.String("string"),
DynamicSortSubtable: pulumi.String("string"),
Filter: pulumi.String("string"),
Group: pulumi.String("string"),
GroupFilter: pulumi.String("string"),
GroupMemberCheck: pulumi.String("string"),
GroupObjectFilter: pulumi.String("string"),
GroupObjectSearchBase: pulumi.String("string"),
GroupSearchBase: pulumi.String("string"),
Interface: pulumi.String("string"),
InterfaceSelectMethod: pulumi.String("string"),
MaxConnections: pulumi.Float64(0),
MemberAttr: pulumi.String("string"),
ObjectUserLdapDynamicMappingId: pulumi.String("string"),
ObtainUserInfo: pulumi.String("string"),
PasswordAttr: pulumi.String("string"),
PasswordExpiryWarning: pulumi.String("string"),
PasswordRenewal: pulumi.String("string"),
Passwords: pulumi.StringArray{
pulumi.String("string"),
},
Port: pulumi.Float64(0),
RetrieveProtectionProfile: pulumi.String("string"),
Scopetype: pulumi.String("string"),
SearchTypes: pulumi.StringArray{
pulumi.String("string"),
},
SecondaryServer: pulumi.String("string"),
Secure: pulumi.String("string"),
Server: pulumi.String("string"),
ServerIdentityCheck: pulumi.String("string"),
SourceIp: pulumi.String("string"),
SourceIpInterfaces: pulumi.StringArray{
pulumi.String("string"),
},
SourcePort: pulumi.Float64(0),
SslMaxProtoVersion: pulumi.String("string"),
SslMinProtoVersion: pulumi.String("string"),
StatusTtl: pulumi.Float64(0),
TertiaryServer: pulumi.String("string"),
TwoFactor: pulumi.String("string"),
TwoFactorAuthentication: pulumi.String("string"),
TwoFactorFilter: pulumi.String("string"),
TwoFactorNotification: pulumi.String("string"),
Type: pulumi.String("string"),
UserInfoExchangeServer: pulumi.String("string"),
Username: pulumi.String("string"),
})

    var objectUserLdapDynamicMappingResource = new ObjectUserLdapDynamicMapping("objectUserLdapDynamicMappingResource", ObjectUserLdapDynamicMappingArgs.builder()
    .ldap("string")
    ._scopes(ObjectUserLdapDynamicMapping_ScopeArgs.builder()
        .name("string")
        .vdom("string")
        .build())
    .accountKeyCertField("string")
    .accountKeyFilter("string")
    .accountKeyName("string")
    .accountKeyProcessing("string")
    .accountKeyUpnSan("string")
    .adom("string")
    .antiphish("string")
    .caCert("string")
    .clientCertAuth("string")
    .clientCerts("string")
    .cnid("string")
    .dn("string")
    .dynamicSortSubtable("string")
    .filter("string")
    .group("string")
    .groupFilter("string")
    .groupMemberCheck("string")
    .groupObjectFilter("string")
    .groupObjectSearchBase("string")
    .groupSearchBase("string")
    .interface_("string")
    .interfaceSelectMethod("string")
    .maxConnections(0)
    .memberAttr("string")
    .objectUserLdapDynamicMappingId("string")
    .obtainUserInfo("string")
    .passwordAttr("string")
    .passwordExpiryWarning("string")
    .passwordRenewal("string")
    .passwords("string")
    .port(0)
    .retrieveProtectionProfile("string")
    .scopetype("string")
    .searchTypes("string")
    .secondaryServer("string")
    .secure("string")
    .server("string")
    .serverIdentityCheck("string")
    .sourceIp("string")
    .sourceIpInterfaces("string")
    .sourcePort(0)
    .sslMaxProtoVersion("string")
    .sslMinProtoVersion("string")
    .statusTtl(0)
    .tertiaryServer("string")
    .twoFactor("string")
    .twoFactorAuthentication("string")
    .twoFactorFilter("string")
    .twoFactorNotification("string")
    .type("string")
    .userInfoExchangeServer("string")
    .username("string")
    .build());

    object_user_ldap_dynamic_mapping_resource = fortimanager.ObjectUserLdapDynamicMapping("objectUserLdapDynamicMappingResource",
    ldap="string",
    _scopes=[{
        "name": "string",
        "vdom": "string",
    }],
    account_key_cert_field="string",
    account_key_filter="string",
    account_key_name="string",
    account_key_processing="string",
    account_key_upn_san="string",
    adom="string",
    antiphish="string",
    ca_cert="string",
    client_cert_auth="string",
    client_certs=["string"],
    cnid="string",
    dn="string",
    dynamic_sort_subtable="string",
    filter="string",
    group="string",
    group_filter="string",
    group_member_check="string",
    group_object_filter="string",
    group_object_search_base="string",
    group_search_base="string",
    interface="string",
    interface_select_method="string",
    max_connections=0,
    member_attr="string",
    object_user_ldap_dynamic_mapping_id="string",
    obtain_user_info="string",
    password_attr="string",
    password_expiry_warning="string",
    password_renewal="string",
    passwords=["string"],
    port=0,
    retrieve_protection_profile="string",
    scopetype="string",
    search_types=["string"],
    secondary_server="string",
    secure="string",
    server="string",
    server_identity_check="string",
    source_ip="string",
    source_ip_interfaces=["string"],
    source_port=0,
    ssl_max_proto_version="string",
    ssl_min_proto_version="string",
    status_ttl=0,
    tertiary_server="string",
    two_factor="string",
    two_factor_authentication="string",
    two_factor_filter="string",
    two_factor_notification="string",
    type="string",
    user_info_exchange_server="string",
    username="string")

    const objectUserLdapDynamicMappingResource = new fortimanager.ObjectUserLdapDynamicMapping("objectUserLdapDynamicMappingResource", {
    ldap: "string",
    _scopes: [{
        name: "string",
        vdom: "string",
    }],
    accountKeyCertField: "string",
    accountKeyFilter: "string",
    accountKeyName: "string",
    accountKeyProcessing: "string",
    accountKeyUpnSan: "string",
    adom: "string",
    antiphish: "string",
    caCert: "string",
    clientCertAuth: "string",
    clientCerts: ["string"],
    cnid: "string",
    dn: "string",
    dynamicSortSubtable: "string",
    filter: "string",
    group: "string",
    groupFilter: "string",
    groupMemberCheck: "string",
    groupObjectFilter: "string",
    groupObjectSearchBase: "string",
    groupSearchBase: "string",
    "interface": "string",
    interfaceSelectMethod: "string",
    maxConnections: 0,
    memberAttr: "string",
    objectUserLdapDynamicMappingId: "string",
    obtainUserInfo: "string",
    passwordAttr: "string",
    passwordExpiryWarning: "string",
    passwordRenewal: "string",
    passwords: ["string"],
    port: 0,
    retrieveProtectionProfile: "string",
    scopetype: "string",
    searchTypes: ["string"],
    secondaryServer: "string",
    secure: "string",
    server: "string",
    serverIdentityCheck: "string",
    sourceIp: "string",
    sourceIpInterfaces: ["string"],
    sourcePort: 0,
    sslMaxProtoVersion: "string",
    sslMinProtoVersion: "string",
    statusTtl: 0,
    tertiaryServer: "string",
    twoFactor: "string",
    twoFactorAuthentication: "string",
    twoFactorFilter: "string",
    twoFactorNotification: "string",
    type: "string",
    userInfoExchangeServer: "string",
    username: "string",
});

    type: fortimanager:ObjectUserLdapDynamicMapping
properties:
    _scopes:
        - name: string
          vdom: string
    accountKeyCertField: string
    accountKeyFilter: string
    accountKeyName: string
    accountKeyProcessing: string
    accountKeyUpnSan: string
    adom: string
    antiphish: string
    caCert: string
    clientCertAuth: string
    clientCerts:
        - string
    cnid: string
    dn: string
    dynamicSortSubtable: string
    filter: string
    group: string
    groupFilter: string
    groupMemberCheck: string
    groupObjectFilter: string
    groupObjectSearchBase: string
    groupSearchBase: string
    interface: string
    interfaceSelectMethod: string
    ldap: string
    maxConnections: 0
    memberAttr: string
    objectUserLdapDynamicMappingId: string
    obtainUserInfo: string
    passwordAttr: string
    passwordExpiryWarning: string
    passwordRenewal: string
    passwords:
        - string
    port: 0
    retrieveProtectionProfile: string
    scopetype: string
    searchTypes:
        - string
    secondaryServer: string
    secure: string
    server: string
    serverIdentityCheck: string
    sourceIp: string
    sourceIpInterfaces:
        - string
    sourcePort: 0
    sslMaxProtoVersion: string
    sslMinProtoVersion: string
    statusTtl: 0
    tertiaryServer: string
    twoFactor: string
    twoFactorAuthentication: string
    twoFactorFilter: string
    twoFactorNotification: string
    type: string
    userInfoExchangeServer: string
    username: string

    ObjectUserLdapDynamicMapping Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ObjectUserLdapDynamicMapping resource accepts the following input properties:

    Ldap string
    Ldap.
    AccountKeyCertField string
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    AccountKeyFilter string
    Account key filter, using the UPN as the search filter.
    AccountKeyName string
    Account-Key-Name.
    AccountKeyProcessing string
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    AccountKeyUpnSan string
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Antiphish string
    Antiphish. Valid values: disable, enable.
    CaCert string
    CA certificate name.
    ClientCertAuth string
    Client-Cert-Auth. Valid values: disable, enable.
    ClientCerts List<string>
    Client-Cert.
    Cnid string
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    Dn string
    Distinguished name used to look up entries on the LDAP server.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    Filter string
    Filter.
    Group string
    Group.
    GroupFilter string
    Filter used for group matching.
    GroupMemberCheck string
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    GroupObjectFilter string
    Filter used for group searching.
    GroupObjectSearchBase string
    Group-Object-Search-Base.
    GroupSearchBase string
    Search base used for group searching.
    Interface string
    Specify outgoing interface to reach server.
    InterfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    MaxConnections double
    Max-Connections.
    MemberAttr string
    Name of attribute from which to get group membership.
    ObjectUserLdapDynamicMappingId string
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    ObtainUserInfo string
    Enable/disable obtaining of user information. Valid values: disable, enable.
    PasswordAttr string
    Password-Attr.
    PasswordExpiryWarning string
    Enable/disable password expiry warnings. Valid values: disable, enable.
    PasswordRenewal string
    Enable/disable online password renewal. Valid values: disable, enable.
    Passwords List<string>
    Password for initial binding.
    Port double
    Port to be used for communication with the LDAP server (default = 389).
    RetrieveProtectionProfile string
    Retrieve-Protection-Profile.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SearchTypes List<string>
    Search type. Valid values: nested, recursive.
    SecondaryServer string
    Secondary LDAP server CN domain name or IP.
    Secure string
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    Server string
    LDAP server CN domain name or IP.
    ServerIdentityCheck string
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    SourceIp string
    Source IP for communications to LDAP server.
    SourceIpInterfaces List<string>
    Source interface for communication with the LDAP server.
    SourcePort double
    Source-Port.
    SslMaxProtoVersion string
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    SslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    StatusTtl double
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    TertiaryServer string
    Tertiary LDAP server CN domain name or IP.
    TwoFactor string
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    TwoFactorAuthentication string
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    TwoFactorFilter string
    Filter used to synchronize users to FortiToken Cloud.
    TwoFactorNotification string
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    Type string
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    UserInfoExchangeServer string
    MS Exchange server from which to fetch user information.
    Username string
    Username (full DN) for initial binding.
    _scopes List<ObjectUserLdapDynamicMapping_Scope>
    _Scope. The structure of _scope block is documented below.
    Ldap string
    Ldap.
    AccountKeyCertField string
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    AccountKeyFilter string
    Account key filter, using the UPN as the search filter.
    AccountKeyName string
    Account-Key-Name.
    AccountKeyProcessing string
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    AccountKeyUpnSan string
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Antiphish string
    Antiphish. Valid values: disable, enable.
    CaCert string
    CA certificate name.
    ClientCertAuth string
    Client-Cert-Auth. Valid values: disable, enable.
    ClientCerts []string
    Client-Cert.
    Cnid string
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    Dn string
    Distinguished name used to look up entries on the LDAP server.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    Filter string
    Filter.
    Group string
    Group.
    GroupFilter string
    Filter used for group matching.
    GroupMemberCheck string
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    GroupObjectFilter string
    Filter used for group searching.
    GroupObjectSearchBase string
    Group-Object-Search-Base.
    GroupSearchBase string
    Search base used for group searching.
    Interface string
    Specify outgoing interface to reach server.
    InterfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    MaxConnections float64
    Max-Connections.
    MemberAttr string
    Name of attribute from which to get group membership.
    ObjectUserLdapDynamicMappingId string
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    ObtainUserInfo string
    Enable/disable obtaining of user information. Valid values: disable, enable.
    PasswordAttr string
    Password-Attr.
    PasswordExpiryWarning string
    Enable/disable password expiry warnings. Valid values: disable, enable.
    PasswordRenewal string
    Enable/disable online password renewal. Valid values: disable, enable.
    Passwords []string
    Password for initial binding.
    Port float64
    Port to be used for communication with the LDAP server (default = 389).
    RetrieveProtectionProfile string
    Retrieve-Protection-Profile.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SearchTypes []string
    Search type. Valid values: nested, recursive.
    SecondaryServer string
    Secondary LDAP server CN domain name or IP.
    Secure string
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    Server string
    LDAP server CN domain name or IP.
    ServerIdentityCheck string
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    SourceIp string
    Source IP for communications to LDAP server.
    SourceIpInterfaces []string
    Source interface for communication with the LDAP server.
    SourcePort float64
    Source-Port.
    SslMaxProtoVersion string
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    SslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    StatusTtl float64
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    TertiaryServer string
    Tertiary LDAP server CN domain name or IP.
    TwoFactor string
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    TwoFactorAuthentication string
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    TwoFactorFilter string
    Filter used to synchronize users to FortiToken Cloud.
    TwoFactorNotification string
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    Type string
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    UserInfoExchangeServer string
    MS Exchange server from which to fetch user information.
    Username string
    Username (full DN) for initial binding.
    _scopes []ObjectUserLdapDynamicMapping_ScopeArgs
    _Scope. The structure of _scope block is documented below.
    ldap String
    Ldap.
    _scopes List<ObjectUserLdapDynamicMapping_Scope>
    _Scope. The structure of _scope block is documented below.
    accountKeyCertField String
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    accountKeyFilter String
    Account key filter, using the UPN as the search filter.
    accountKeyName String
    Account-Key-Name.
    accountKeyProcessing String
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    accountKeyUpnSan String
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    antiphish String
    Antiphish. Valid values: disable, enable.
    caCert String
    CA certificate name.
    clientCertAuth String
    Client-Cert-Auth. Valid values: disable, enable.
    clientCerts List<String>
    Client-Cert.
    cnid String
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    dn String
    Distinguished name used to look up entries on the LDAP server.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    filter String
    Filter.
    group String
    Group.
    groupFilter String
    Filter used for group matching.
    groupMemberCheck String
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    groupObjectFilter String
    Filter used for group searching.
    groupObjectSearchBase String
    Group-Object-Search-Base.
    groupSearchBase String
    Search base used for group searching.
    interfaceSelectMethod String
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    interface_ String
    Specify outgoing interface to reach server.
    maxConnections Double
    Max-Connections.
    memberAttr String
    Name of attribute from which to get group membership.
    objectUserLdapDynamicMappingId String
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    obtainUserInfo String
    Enable/disable obtaining of user information. Valid values: disable, enable.
    passwordAttr String
    Password-Attr.
    passwordExpiryWarning String
    Enable/disable password expiry warnings. Valid values: disable, enable.
    passwordRenewal String
    Enable/disable online password renewal. Valid values: disable, enable.
    passwords List<String>
    Password for initial binding.
    port Double
    Port to be used for communication with the LDAP server (default = 389).
    retrieveProtectionProfile String
    Retrieve-Protection-Profile.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    searchTypes List<String>
    Search type. Valid values: nested, recursive.
    secondaryServer String
    Secondary LDAP server CN domain name or IP.
    secure String
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    server String
    LDAP server CN domain name or IP.
    serverIdentityCheck String
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    sourceIp String
    Source IP for communications to LDAP server.
    sourceIpInterfaces List<String>
    Source interface for communication with the LDAP server.
    sourcePort Double
    Source-Port.
    sslMaxProtoVersion String
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    sslMinProtoVersion String
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    statusTtl Double
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    tertiaryServer String
    Tertiary LDAP server CN domain name or IP.
    twoFactor String
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    twoFactorAuthentication String
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    twoFactorFilter String
    Filter used to synchronize users to FortiToken Cloud.
    twoFactorNotification String
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    type String
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    userInfoExchangeServer String
    MS Exchange server from which to fetch user information.
    username String
    Username (full DN) for initial binding.
    ldap string
    Ldap.
    _scopes ObjectUserLdapDynamicMapping_Scope[]
    _Scope. The structure of _scope block is documented below.
    accountKeyCertField string
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    accountKeyFilter string
    Account key filter, using the UPN as the search filter.
    accountKeyName string
    Account-Key-Name.
    accountKeyProcessing string
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    accountKeyUpnSan string
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    antiphish string
    Antiphish. Valid values: disable, enable.
    caCert string
    CA certificate name.
    clientCertAuth string
    Client-Cert-Auth. Valid values: disable, enable.
    clientCerts string[]
    Client-Cert.
    cnid string
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    dn string
    Distinguished name used to look up entries on the LDAP server.
    dynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    filter string
    Filter.
    group string
    Group.
    groupFilter string
    Filter used for group matching.
    groupMemberCheck string
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    groupObjectFilter string
    Filter used for group searching.
    groupObjectSearchBase string
    Group-Object-Search-Base.
    groupSearchBase string
    Search base used for group searching.
    interface string
    Specify outgoing interface to reach server.
    interfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    maxConnections number
    Max-Connections.
    memberAttr string
    Name of attribute from which to get group membership.
    objectUserLdapDynamicMappingId string
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    obtainUserInfo string
    Enable/disable obtaining of user information. Valid values: disable, enable.
    passwordAttr string
    Password-Attr.
    passwordExpiryWarning string
    Enable/disable password expiry warnings. Valid values: disable, enable.
    passwordRenewal string
    Enable/disable online password renewal. Valid values: disable, enable.
    passwords string[]
    Password for initial binding.
    port number
    Port to be used for communication with the LDAP server (default = 389).
    retrieveProtectionProfile string
    Retrieve-Protection-Profile.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    searchTypes string[]
    Search type. Valid values: nested, recursive.
    secondaryServer string
    Secondary LDAP server CN domain name or IP.
    secure string
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    server string
    LDAP server CN domain name or IP.
    serverIdentityCheck string
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    sourceIp string
    Source IP for communications to LDAP server.
    sourceIpInterfaces string[]
    Source interface for communication with the LDAP server.
    sourcePort number
    Source-Port.
    sslMaxProtoVersion string
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    sslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    statusTtl number
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    tertiaryServer string
    Tertiary LDAP server CN domain name or IP.
    twoFactor string
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    twoFactorAuthentication string
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    twoFactorFilter string
    Filter used to synchronize users to FortiToken Cloud.
    twoFactorNotification string
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    type string
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    userInfoExchangeServer string
    MS Exchange server from which to fetch user information.
    username string
    Username (full DN) for initial binding.
    ldap str
    Ldap.
    _scopes Sequence[ObjectUserLdapDynamicMapping_ScopeArgs]
    _Scope. The structure of _scope block is documented below.
    account_key_cert_field str
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    account_key_filter str
    Account key filter, using the UPN as the search filter.
    account_key_name str
    Account-Key-Name.
    account_key_processing str
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    account_key_upn_san str
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    antiphish str
    Antiphish. Valid values: disable, enable.
    ca_cert str
    CA certificate name.
    client_cert_auth str
    Client-Cert-Auth. Valid values: disable, enable.
    client_certs Sequence[str]
    Client-Cert.
    cnid str
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    dn str
    Distinguished name used to look up entries on the LDAP server.
    dynamic_sort_subtable str
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    filter str
    Filter.
    group str
    Group.
    group_filter str
    Filter used for group matching.
    group_member_check str
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    group_object_filter str
    Filter used for group searching.
    group_object_search_base str
    Group-Object-Search-Base.
    group_search_base str
    Search base used for group searching.
    interface str
    Specify outgoing interface to reach server.
    interface_select_method str
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    max_connections float
    Max-Connections.
    member_attr str
    Name of attribute from which to get group membership.
    object_user_ldap_dynamic_mapping_id str
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    obtain_user_info str
    Enable/disable obtaining of user information. Valid values: disable, enable.
    password_attr str
    Password-Attr.
    password_expiry_warning str
    Enable/disable password expiry warnings. Valid values: disable, enable.
    password_renewal str
    Enable/disable online password renewal. Valid values: disable, enable.
    passwords Sequence[str]
    Password for initial binding.
    port float
    Port to be used for communication with the LDAP server (default = 389).
    retrieve_protection_profile str
    Retrieve-Protection-Profile.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    search_types Sequence[str]
    Search type. Valid values: nested, recursive.
    secondary_server str
    Secondary LDAP server CN domain name or IP.
    secure str
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    server str
    LDAP server CN domain name or IP.
    server_identity_check str
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    source_ip str
    Source IP for communications to LDAP server.
    source_ip_interfaces Sequence[str]
    Source interface for communication with the LDAP server.
    source_port float
    Source-Port.
    ssl_max_proto_version str
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    ssl_min_proto_version str
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    status_ttl float
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    tertiary_server str
    Tertiary LDAP server CN domain name or IP.
    two_factor str
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    two_factor_authentication str
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    two_factor_filter str
    Filter used to synchronize users to FortiToken Cloud.
    two_factor_notification str
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    type str
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    user_info_exchange_server str
    MS Exchange server from which to fetch user information.
    username str
    Username (full DN) for initial binding.
    ldap String
    Ldap.
    _scopes List<Property Map>
    _Scope. The structure of _scope block is documented below.
    accountKeyCertField String
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    accountKeyFilter String
    Account key filter, using the UPN as the search filter.
    accountKeyName String
    Account-Key-Name.
    accountKeyProcessing String
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    accountKeyUpnSan String
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    antiphish String
    Antiphish. Valid values: disable, enable.
    caCert String
    CA certificate name.
    clientCertAuth String
    Client-Cert-Auth. Valid values: disable, enable.
    clientCerts List<String>
    Client-Cert.
    cnid String
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    dn String
    Distinguished name used to look up entries on the LDAP server.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    filter String
    Filter.
    group String
    Group.
    groupFilter String
    Filter used for group matching.
    groupMemberCheck String
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    groupObjectFilter String
    Filter used for group searching.
    groupObjectSearchBase String
    Group-Object-Search-Base.
    groupSearchBase String
    Search base used for group searching.
    interface String
    Specify outgoing interface to reach server.
    interfaceSelectMethod String
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    maxConnections Number
    Max-Connections.
    memberAttr String
    Name of attribute from which to get group membership.
    objectUserLdapDynamicMappingId String
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    obtainUserInfo String
    Enable/disable obtaining of user information. Valid values: disable, enable.
    passwordAttr String
    Password-Attr.
    passwordExpiryWarning String
    Enable/disable password expiry warnings. Valid values: disable, enable.
    passwordRenewal String
    Enable/disable online password renewal. Valid values: disable, enable.
    passwords List<String>
    Password for initial binding.
    port Number
    Port to be used for communication with the LDAP server (default = 389).
    retrieveProtectionProfile String
    Retrieve-Protection-Profile.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    searchTypes List<String>
    Search type. Valid values: nested, recursive.
    secondaryServer String
    Secondary LDAP server CN domain name or IP.
    secure String
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    server String
    LDAP server CN domain name or IP.
    serverIdentityCheck String
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    sourceIp String
    Source IP for communications to LDAP server.
    sourceIpInterfaces List<String>
    Source interface for communication with the LDAP server.
    sourcePort Number
    Source-Port.
    sslMaxProtoVersion String
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    sslMinProtoVersion String
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    statusTtl Number
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    tertiaryServer String
    Tertiary LDAP server CN domain name or IP.
    twoFactor String
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    twoFactorAuthentication String
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    twoFactorFilter String
    Filter used to synchronize users to FortiToken Cloud.
    twoFactorNotification String
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    type String
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    userInfoExchangeServer String
    MS Exchange server from which to fetch user information.
    username String
    Username (full DN) for initial binding.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ObjectUserLdapDynamicMapping resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ObjectUserLdapDynamicMapping Resource

    Get an existing ObjectUserLdapDynamicMapping resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ObjectUserLdapDynamicMappingState, opts?: CustomResourceOptions): ObjectUserLdapDynamicMapping
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        _scopes: Optional[Sequence[ObjectUserLdapDynamicMapping_ScopeArgs]] = None,
        account_key_cert_field: Optional[str] = None,
        account_key_filter: Optional[str] = None,
        account_key_name: Optional[str] = None,
        account_key_processing: Optional[str] = None,
        account_key_upn_san: Optional[str] = None,
        adom: Optional[str] = None,
        antiphish: Optional[str] = None,
        ca_cert: Optional[str] = None,
        client_cert_auth: Optional[str] = None,
        client_certs: Optional[Sequence[str]] = None,
        cnid: Optional[str] = None,
        dn: Optional[str] = None,
        dynamic_sort_subtable: Optional[str] = None,
        filter: Optional[str] = None,
        group: Optional[str] = None,
        group_filter: Optional[str] = None,
        group_member_check: Optional[str] = None,
        group_object_filter: Optional[str] = None,
        group_object_search_base: Optional[str] = None,
        group_search_base: Optional[str] = None,
        interface: Optional[str] = None,
        interface_select_method: Optional[str] = None,
        ldap: Optional[str] = None,
        max_connections: Optional[float] = None,
        member_attr: Optional[str] = None,
        object_user_ldap_dynamic_mapping_id: Optional[str] = None,
        obtain_user_info: Optional[str] = None,
        password_attr: Optional[str] = None,
        password_expiry_warning: Optional[str] = None,
        password_renewal: Optional[str] = None,
        passwords: Optional[Sequence[str]] = None,
        port: Optional[float] = None,
        retrieve_protection_profile: Optional[str] = None,
        scopetype: Optional[str] = None,
        search_types: Optional[Sequence[str]] = None,
        secondary_server: Optional[str] = None,
        secure: Optional[str] = None,
        server: Optional[str] = None,
        server_identity_check: Optional[str] = None,
        source_ip: Optional[str] = None,
        source_ip_interfaces: Optional[Sequence[str]] = None,
        source_port: Optional[float] = None,
        ssl_max_proto_version: Optional[str] = None,
        ssl_min_proto_version: Optional[str] = None,
        status_ttl: Optional[float] = None,
        tertiary_server: Optional[str] = None,
        two_factor: Optional[str] = None,
        two_factor_authentication: Optional[str] = None,
        two_factor_filter: Optional[str] = None,
        two_factor_notification: Optional[str] = None,
        type: Optional[str] = None,
        user_info_exchange_server: Optional[str] = None,
        username: Optional[str] = None) -> ObjectUserLdapDynamicMapping
    func GetObjectUserLdapDynamicMapping(ctx *Context, name string, id IDInput, state *ObjectUserLdapDynamicMappingState, opts ...ResourceOption) (*ObjectUserLdapDynamicMapping, error)
    public static ObjectUserLdapDynamicMapping Get(string name, Input<string> id, ObjectUserLdapDynamicMappingState? state, CustomResourceOptions? opts = null)
    public static ObjectUserLdapDynamicMapping get(String name, Output<String> id, ObjectUserLdapDynamicMappingState state, CustomResourceOptions options)
    resources:  _:    type: fortimanager:ObjectUserLdapDynamicMapping    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountKeyCertField string
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    AccountKeyFilter string
    Account key filter, using the UPN as the search filter.
    AccountKeyName string
    Account-Key-Name.
    AccountKeyProcessing string
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    AccountKeyUpnSan string
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Antiphish string
    Antiphish. Valid values: disable, enable.
    CaCert string
    CA certificate name.
    ClientCertAuth string
    Client-Cert-Auth. Valid values: disable, enable.
    ClientCerts List<string>
    Client-Cert.
    Cnid string
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    Dn string
    Distinguished name used to look up entries on the LDAP server.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    Filter string
    Filter.
    Group string
    Group.
    GroupFilter string
    Filter used for group matching.
    GroupMemberCheck string
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    GroupObjectFilter string
    Filter used for group searching.
    GroupObjectSearchBase string
    Group-Object-Search-Base.
    GroupSearchBase string
    Search base used for group searching.
    Interface string
    Specify outgoing interface to reach server.
    InterfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    Ldap string
    Ldap.
    MaxConnections double
    Max-Connections.
    MemberAttr string
    Name of attribute from which to get group membership.
    ObjectUserLdapDynamicMappingId string
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    ObtainUserInfo string
    Enable/disable obtaining of user information. Valid values: disable, enable.
    PasswordAttr string
    Password-Attr.
    PasswordExpiryWarning string
    Enable/disable password expiry warnings. Valid values: disable, enable.
    PasswordRenewal string
    Enable/disable online password renewal. Valid values: disable, enable.
    Passwords List<string>
    Password for initial binding.
    Port double
    Port to be used for communication with the LDAP server (default = 389).
    RetrieveProtectionProfile string
    Retrieve-Protection-Profile.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SearchTypes List<string>
    Search type. Valid values: nested, recursive.
    SecondaryServer string
    Secondary LDAP server CN domain name or IP.
    Secure string
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    Server string
    LDAP server CN domain name or IP.
    ServerIdentityCheck string
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    SourceIp string
    Source IP for communications to LDAP server.
    SourceIpInterfaces List<string>
    Source interface for communication with the LDAP server.
    SourcePort double
    Source-Port.
    SslMaxProtoVersion string
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    SslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    StatusTtl double
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    TertiaryServer string
    Tertiary LDAP server CN domain name or IP.
    TwoFactor string
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    TwoFactorAuthentication string
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    TwoFactorFilter string
    Filter used to synchronize users to FortiToken Cloud.
    TwoFactorNotification string
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    Type string
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    UserInfoExchangeServer string
    MS Exchange server from which to fetch user information.
    Username string
    Username (full DN) for initial binding.
    _scopes List<ObjectUserLdapDynamicMapping_Scope>
    _Scope. The structure of _scope block is documented below.
    AccountKeyCertField string
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    AccountKeyFilter string
    Account key filter, using the UPN as the search filter.
    AccountKeyName string
    Account-Key-Name.
    AccountKeyProcessing string
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    AccountKeyUpnSan string
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Antiphish string
    Antiphish. Valid values: disable, enable.
    CaCert string
    CA certificate name.
    ClientCertAuth string
    Client-Cert-Auth. Valid values: disable, enable.
    ClientCerts []string
    Client-Cert.
    Cnid string
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    Dn string
    Distinguished name used to look up entries on the LDAP server.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    Filter string
    Filter.
    Group string
    Group.
    GroupFilter string
    Filter used for group matching.
    GroupMemberCheck string
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    GroupObjectFilter string
    Filter used for group searching.
    GroupObjectSearchBase string
    Group-Object-Search-Base.
    GroupSearchBase string
    Search base used for group searching.
    Interface string
    Specify outgoing interface to reach server.
    InterfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    Ldap string
    Ldap.
    MaxConnections float64
    Max-Connections.
    MemberAttr string
    Name of attribute from which to get group membership.
    ObjectUserLdapDynamicMappingId string
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    ObtainUserInfo string
    Enable/disable obtaining of user information. Valid values: disable, enable.
    PasswordAttr string
    Password-Attr.
    PasswordExpiryWarning string
    Enable/disable password expiry warnings. Valid values: disable, enable.
    PasswordRenewal string
    Enable/disable online password renewal. Valid values: disable, enable.
    Passwords []string
    Password for initial binding.
    Port float64
    Port to be used for communication with the LDAP server (default = 389).
    RetrieveProtectionProfile string
    Retrieve-Protection-Profile.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SearchTypes []string
    Search type. Valid values: nested, recursive.
    SecondaryServer string
    Secondary LDAP server CN domain name or IP.
    Secure string
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    Server string
    LDAP server CN domain name or IP.
    ServerIdentityCheck string
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    SourceIp string
    Source IP for communications to LDAP server.
    SourceIpInterfaces []string
    Source interface for communication with the LDAP server.
    SourcePort float64
    Source-Port.
    SslMaxProtoVersion string
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    SslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    StatusTtl float64
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    TertiaryServer string
    Tertiary LDAP server CN domain name or IP.
    TwoFactor string
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    TwoFactorAuthentication string
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    TwoFactorFilter string
    Filter used to synchronize users to FortiToken Cloud.
    TwoFactorNotification string
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    Type string
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    UserInfoExchangeServer string
    MS Exchange server from which to fetch user information.
    Username string
    Username (full DN) for initial binding.
    _scopes []ObjectUserLdapDynamicMapping_ScopeArgs
    _Scope. The structure of _scope block is documented below.
    _scopes List<ObjectUserLdapDynamicMapping_Scope>
    _Scope. The structure of _scope block is documented below.
    accountKeyCertField String
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    accountKeyFilter String
    Account key filter, using the UPN as the search filter.
    accountKeyName String
    Account-Key-Name.
    accountKeyProcessing String
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    accountKeyUpnSan String
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    antiphish String
    Antiphish. Valid values: disable, enable.
    caCert String
    CA certificate name.
    clientCertAuth String
    Client-Cert-Auth. Valid values: disable, enable.
    clientCerts List<String>
    Client-Cert.
    cnid String
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    dn String
    Distinguished name used to look up entries on the LDAP server.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    filter String
    Filter.
    group String
    Group.
    groupFilter String
    Filter used for group matching.
    groupMemberCheck String
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    groupObjectFilter String
    Filter used for group searching.
    groupObjectSearchBase String
    Group-Object-Search-Base.
    groupSearchBase String
    Search base used for group searching.
    interfaceSelectMethod String
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    interface_ String
    Specify outgoing interface to reach server.
    ldap String
    Ldap.
    maxConnections Double
    Max-Connections.
    memberAttr String
    Name of attribute from which to get group membership.
    objectUserLdapDynamicMappingId String
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    obtainUserInfo String
    Enable/disable obtaining of user information. Valid values: disable, enable.
    passwordAttr String
    Password-Attr.
    passwordExpiryWarning String
    Enable/disable password expiry warnings. Valid values: disable, enable.
    passwordRenewal String
    Enable/disable online password renewal. Valid values: disable, enable.
    passwords List<String>
    Password for initial binding.
    port Double
    Port to be used for communication with the LDAP server (default = 389).
    retrieveProtectionProfile String
    Retrieve-Protection-Profile.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    searchTypes List<String>
    Search type. Valid values: nested, recursive.
    secondaryServer String
    Secondary LDAP server CN domain name or IP.
    secure String
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    server String
    LDAP server CN domain name or IP.
    serverIdentityCheck String
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    sourceIp String
    Source IP for communications to LDAP server.
    sourceIpInterfaces List<String>
    Source interface for communication with the LDAP server.
    sourcePort Double
    Source-Port.
    sslMaxProtoVersion String
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    sslMinProtoVersion String
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    statusTtl Double
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    tertiaryServer String
    Tertiary LDAP server CN domain name or IP.
    twoFactor String
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    twoFactorAuthentication String
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    twoFactorFilter String
    Filter used to synchronize users to FortiToken Cloud.
    twoFactorNotification String
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    type String
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    userInfoExchangeServer String
    MS Exchange server from which to fetch user information.
    username String
    Username (full DN) for initial binding.
    _scopes ObjectUserLdapDynamicMapping_Scope[]
    _Scope. The structure of _scope block is documented below.
    accountKeyCertField string
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    accountKeyFilter string
    Account key filter, using the UPN as the search filter.
    accountKeyName string
    Account-Key-Name.
    accountKeyProcessing string
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    accountKeyUpnSan string
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    antiphish string
    Antiphish. Valid values: disable, enable.
    caCert string
    CA certificate name.
    clientCertAuth string
    Client-Cert-Auth. Valid values: disable, enable.
    clientCerts string[]
    Client-Cert.
    cnid string
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    dn string
    Distinguished name used to look up entries on the LDAP server.
    dynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    filter string
    Filter.
    group string
    Group.
    groupFilter string
    Filter used for group matching.
    groupMemberCheck string
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    groupObjectFilter string
    Filter used for group searching.
    groupObjectSearchBase string
    Group-Object-Search-Base.
    groupSearchBase string
    Search base used for group searching.
    interface string
    Specify outgoing interface to reach server.
    interfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    ldap string
    Ldap.
    maxConnections number
    Max-Connections.
    memberAttr string
    Name of attribute from which to get group membership.
    objectUserLdapDynamicMappingId string
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    obtainUserInfo string
    Enable/disable obtaining of user information. Valid values: disable, enable.
    passwordAttr string
    Password-Attr.
    passwordExpiryWarning string
    Enable/disable password expiry warnings. Valid values: disable, enable.
    passwordRenewal string
    Enable/disable online password renewal. Valid values: disable, enable.
    passwords string[]
    Password for initial binding.
    port number
    Port to be used for communication with the LDAP server (default = 389).
    retrieveProtectionProfile string
    Retrieve-Protection-Profile.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    searchTypes string[]
    Search type. Valid values: nested, recursive.
    secondaryServer string
    Secondary LDAP server CN domain name or IP.
    secure string
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    server string
    LDAP server CN domain name or IP.
    serverIdentityCheck string
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    sourceIp string
    Source IP for communications to LDAP server.
    sourceIpInterfaces string[]
    Source interface for communication with the LDAP server.
    sourcePort number
    Source-Port.
    sslMaxProtoVersion string
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    sslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    statusTtl number
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    tertiaryServer string
    Tertiary LDAP server CN domain name or IP.
    twoFactor string
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    twoFactorAuthentication string
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    twoFactorFilter string
    Filter used to synchronize users to FortiToken Cloud.
    twoFactorNotification string
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    type string
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    userInfoExchangeServer string
    MS Exchange server from which to fetch user information.
    username string
    Username (full DN) for initial binding.
    _scopes Sequence[ObjectUserLdapDynamicMapping_ScopeArgs]
    _Scope. The structure of _scope block is documented below.
    account_key_cert_field str
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    account_key_filter str
    Account key filter, using the UPN as the search filter.
    account_key_name str
    Account-Key-Name.
    account_key_processing str
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    account_key_upn_san str
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    antiphish str
    Antiphish. Valid values: disable, enable.
    ca_cert str
    CA certificate name.
    client_cert_auth str
    Client-Cert-Auth. Valid values: disable, enable.
    client_certs Sequence[str]
    Client-Cert.
    cnid str
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    dn str
    Distinguished name used to look up entries on the LDAP server.
    dynamic_sort_subtable str
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    filter str
    Filter.
    group str
    Group.
    group_filter str
    Filter used for group matching.
    group_member_check str
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    group_object_filter str
    Filter used for group searching.
    group_object_search_base str
    Group-Object-Search-Base.
    group_search_base str
    Search base used for group searching.
    interface str
    Specify outgoing interface to reach server.
    interface_select_method str
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    ldap str
    Ldap.
    max_connections float
    Max-Connections.
    member_attr str
    Name of attribute from which to get group membership.
    object_user_ldap_dynamic_mapping_id str
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    obtain_user_info str
    Enable/disable obtaining of user information. Valid values: disable, enable.
    password_attr str
    Password-Attr.
    password_expiry_warning str
    Enable/disable password expiry warnings. Valid values: disable, enable.
    password_renewal str
    Enable/disable online password renewal. Valid values: disable, enable.
    passwords Sequence[str]
    Password for initial binding.
    port float
    Port to be used for communication with the LDAP server (default = 389).
    retrieve_protection_profile str
    Retrieve-Protection-Profile.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    search_types Sequence[str]
    Search type. Valid values: nested, recursive.
    secondary_server str
    Secondary LDAP server CN domain name or IP.
    secure str
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    server str
    LDAP server CN domain name or IP.
    server_identity_check str
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    source_ip str
    Source IP for communications to LDAP server.
    source_ip_interfaces Sequence[str]
    Source interface for communication with the LDAP server.
    source_port float
    Source-Port.
    ssl_max_proto_version str
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    ssl_min_proto_version str
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    status_ttl float
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    tertiary_server str
    Tertiary LDAP server CN domain name or IP.
    two_factor str
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    two_factor_authentication str
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    two_factor_filter str
    Filter used to synchronize users to FortiToken Cloud.
    two_factor_notification str
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    type str
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    user_info_exchange_server str
    MS Exchange server from which to fetch user information.
    username str
    Username (full DN) for initial binding.
    _scopes List<Property Map>
    _Scope. The structure of _scope block is documented below.
    accountKeyCertField String
    Define subject identity field in certificate for user access right checking. Valid values: othername, rfc822name, dnsname.
    accountKeyFilter String
    Account key filter, using the UPN as the search filter.
    accountKeyName String
    Account-Key-Name.
    accountKeyProcessing String
    Account key processing operation, either keep or strip domain string of UPN in the token. Valid values: same, strip.
    accountKeyUpnSan String
    Define SAN in certificate for user principle name matching. Valid values: othername, rfc822name, dnsname.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    antiphish String
    Antiphish. Valid values: disable, enable.
    caCert String
    CA certificate name.
    clientCertAuth String
    Client-Cert-Auth. Valid values: disable, enable.
    clientCerts List<String>
    Client-Cert.
    cnid String
    Common name identifier for the LDAP server. The common name identifier for most LDAP servers is "cn".
    dn String
    Distinguished name used to look up entries on the LDAP server.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    filter String
    Filter.
    group String
    Group.
    groupFilter String
    Filter used for group matching.
    groupMemberCheck String
    Group member checking methods. Valid values: user-attr, group-object, posix-group-object.
    groupObjectFilter String
    Filter used for group searching.
    groupObjectSearchBase String
    Group-Object-Search-Base.
    groupSearchBase String
    Search base used for group searching.
    interface String
    Specify outgoing interface to reach server.
    interfaceSelectMethod String
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    ldap String
    Ldap.
    maxConnections Number
    Max-Connections.
    memberAttr String
    Name of attribute from which to get group membership.
    objectUserLdapDynamicMappingId String
    an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
    obtainUserInfo String
    Enable/disable obtaining of user information. Valid values: disable, enable.
    passwordAttr String
    Password-Attr.
    passwordExpiryWarning String
    Enable/disable password expiry warnings. Valid values: disable, enable.
    passwordRenewal String
    Enable/disable online password renewal. Valid values: disable, enable.
    passwords List<String>
    Password for initial binding.
    port Number
    Port to be used for communication with the LDAP server (default = 389).
    retrieveProtectionProfile String
    Retrieve-Protection-Profile.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    searchTypes List<String>
    Search type. Valid values: nested, recursive.
    secondaryServer String
    Secondary LDAP server CN domain name or IP.
    secure String
    Port to be used for authentication. Valid values: disable, starttls, ldaps.
    server String
    LDAP server CN domain name or IP.
    serverIdentityCheck String
    Enable/disable LDAP server identity check (verify server domain name/IP address against the server certificate). Valid values: disable, enable.
    sourceIp String
    Source IP for communications to LDAP server.
    sourceIpInterfaces List<String>
    Source interface for communication with the LDAP server.
    sourcePort Number
    Source-Port.
    sslMaxProtoVersion String
    Ssl-Max-Proto-Version. Valid values: TLSv1-1, TLSv1-2, SSLv3, TLSv1, TLSv1-3.
    sslMinProtoVersion String
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3.
    statusTtl Number
    Time for which server reachability is cached so that when a server is unreachable, it will not be retried for at least this period of time (0 = cache disabled, default = 300).
    tertiaryServer String
    Tertiary LDAP server CN domain name or IP.
    twoFactor String
    Enable/disable two-factor authentication. Valid values: disable, fortitoken-cloud.
    twoFactorAuthentication String
    Authentication method by FortiToken Cloud. Valid values: fortitoken, email, sms.
    twoFactorFilter String
    Filter used to synchronize users to FortiToken Cloud.
    twoFactorNotification String
    Notification method for user activation by FortiToken Cloud. Valid values: email, sms.
    type String
    Authentication type for LDAP searches. Valid values: simple, anonymous, regular.
    userInfoExchangeServer String
    MS Exchange server from which to fetch user information.
    username String
    Username (full DN) for initial binding.

    Supporting Types

    ObjectUserLdapDynamicMapping_Scope, ObjectUserLdapDynamicMapping_ScopeArgs

    Name string
    Name.
    Vdom string
    Vdom.
    Name string
    Name.
    Vdom string
    Vdom.
    name String
    Name.
    vdom String
    Vdom.
    name string
    Name.
    vdom string
    Vdom.
    name str
    Name.
    vdom str
    Vdom.
    name String
    Name.
    vdom String
    Vdom.

    Import

    ObjectUser LdapDynamicMapping can be imported using any of these accepted formats:

    Set import_options = [“ldap=YOUR_VALUE”] in the provider section.

    $ export “FORTIMANAGER_IMPORT_TABLE”=“true”

    $ pulumi import fortimanager:index/objectUserLdapDynamicMapping:ObjectUserLdapDynamicMapping labelname {{_scope.name}}.{{_scope.vdom}}

    $ unset “FORTIMANAGER_IMPORT_TABLE”

    -> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortimanager fortinetdev/terraform-provider-fortimanager
    License
    Notes
    This Pulumi package is based on the fortimanager Terraform Provider.
    fortimanager logo
    fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
    fortinetdev/terraform-provider-fortimanager