Note: this component stores cluster-wide configuration data and is mirrored across all servers in the topology within the the same cluster.
Note: changes to cluster-wide configuration objects are immediately and automatically mirrored across all servers within the same cluster, so offline changes are not supported.
Authentication Chains may be used to define an authentication process where the end-user must present credentials for one or more Identity Authenticators defined in the chain.
The result returned by the last Identity Authenticator evaluated in the chain will be returned.
↓Relations from This Component
↓Relations to This Component
↓Properties
↓dsconfig Usage
The following components have a direct composition relation from Authentication Chains:
The following components have a direct aggregation relation to Authentication Chains:
The properties supported by this managed object are as follows:
| Basic Properties: | Advanced Properties: |
|---|---|
| ↓ description | None |
| Description | A description for this Authentication Chain |
| Default Value | None |
| Allowed Values | A string |
| Multi-Valued | No |
| Required | No |
| Admin Action Required | None. Modification requires no further action |
To list the configured Authentication Chains:
dsconfig list-authentication-chains
[--property {propertyName}] ...
To view the configuration for an existing Authentication Chain:
dsconfig get-authentication-chain-prop
--chain-name {name}
[--tab-delimited]
[--script-friendly]
[--property {propertyName}] ...
To update the configuration for an existing Authentication Chain:
dsconfig set-authentication-chain-prop
--chain-name {name}
(--set|--add|--remove) {propertyName}:{propertyValue}
[(--set|--add|--remove) {propertyName}:{propertyValue}] ...
To create a new Authentication Chain:
dsconfig create-authentication-chain
--chain-name {name}
[--set {propertyName}:{propertyValue}] ...
To delete an existing Authentication Chain:
dsconfig delete-authentication-chain
--chain-name {name}