1. Packages
  2. Powerscale Provider
  3. API Docs
  4. Adsprovider
powerscale 1.7.0 published on Monday, Apr 14, 2025 by dell

powerscale.Adsprovider

Explore with Pulumi AI

This resource is used to manage the ADS provider entity of PowerScale Array. We can Create, Update and Delete the ADS provider using this resource. We can also import an existing ADS provider from PowerScale array.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as powerscale from "@pulumi/powerscale";

// PowerScale ADS provider allows you to authenticate users and groups
const adsTest = new powerscale.Adsprovider("adsTest", {
    password: "password",
    user: "admin",
});
Copy
import pulumi
import pulumi_powerscale as powerscale

# PowerScale ADS provider allows you to authenticate users and groups
ads_test = powerscale.Adsprovider("adsTest",
    password="password",
    user="admin")
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/powerscale/powerscale"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// PowerScale ADS provider allows you to authenticate users and groups
		_, err := powerscale.NewAdsprovider(ctx, "adsTest", &powerscale.AdsproviderArgs{
			Password: pulumi.String("password"),
			User:     pulumi.String("admin"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Powerscale = Pulumi.Powerscale;

return await Deployment.RunAsync(() => 
{
    // PowerScale ADS provider allows you to authenticate users and groups
    var adsTest = new Powerscale.Adsprovider("adsTest", new()
    {
        Password = "password",
        User = "admin",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.powerscale.Adsprovider;
import com.pulumi.powerscale.AdsproviderArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // PowerScale ADS provider allows you to authenticate users and groups
        var adsTest = new Adsprovider("adsTest", AdsproviderArgs.builder()
            .password("password")
            .user("admin")
            .build());

    }
}
Copy
resources:
  # PowerScale ADS provider allows you to authenticate users and groups
  adsTest:
    type: powerscale:Adsprovider
    properties:
      password: password
      # User should have join permission
      user: admin
Copy

Create Adsprovider Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Adsprovider(name: string, args: AdsproviderArgs, opts?: CustomResourceOptions);
@overload
def Adsprovider(resource_name: str,
                args: AdsproviderArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def Adsprovider(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                password: Optional[str] = None,
                user: Optional[str] = None,
                adsprovider_id: Optional[str] = None,
                allocate_gids: Optional[bool] = None,
                allocate_uids: Optional[bool] = None,
                assume_default_domain: Optional[bool] = None,
                authentication: Optional[bool] = None,
                check_duplicates: Optional[bool] = None,
                check_online_interval: Optional[float] = None,
                controller_time: Optional[float] = None,
                create_home_directory: Optional[bool] = None,
                dns_domain: Optional[str] = None,
                domain_controller: Optional[str] = None,
                domain_offline_alerts: Optional[bool] = None,
                extra_expected_spns: Optional[Sequence[str]] = None,
                findable_groups: Optional[Sequence[str]] = None,
                findable_users: Optional[Sequence[str]] = None,
                groupnet: Optional[str] = None,
                home_directory_template: Optional[str] = None,
                ignore_all_trusts: Optional[bool] = None,
                ignored_trusted_domains: Optional[Sequence[str]] = None,
                include_trusted_domains: Optional[Sequence[str]] = None,
                instance: Optional[str] = None,
                kerberos_hdfs_spn: Optional[bool] = None,
                kerberos_nfs_spn: Optional[bool] = None,
                ldap_sign_and_seal: Optional[bool] = None,
                login_shell: Optional[str] = None,
                lookup_domains: Optional[Sequence[str]] = None,
                lookup_groups: Optional[bool] = None,
                lookup_normalize_groups: Optional[bool] = None,
                lookup_normalize_users: Optional[bool] = None,
                lookup_users: Optional[bool] = None,
                machine_account: Optional[str] = None,
                machine_password_changes: Optional[bool] = None,
                machine_password_lifespan: Optional[float] = None,
                name: Optional[str] = None,
                node_dc_affinity: Optional[str] = None,
                node_dc_affinity_timeout: Optional[float] = None,
                nss_enumeration: Optional[bool] = None,
                organizational_unit: Optional[str] = None,
                reset_schannel: Optional[bool] = None,
                restrict_findable: Optional[bool] = None,
                rpc_call_timeout: Optional[float] = None,
                scope: Optional[str] = None,
                server_retry_limit: Optional[float] = None,
                sfu_support: Optional[str] = None,
                spns: Optional[Sequence[str]] = None,
                store_sfu_mappings: Optional[bool] = None,
                unfindable_groups: Optional[Sequence[str]] = None,
                unfindable_users: Optional[Sequence[str]] = None)
func NewAdsprovider(ctx *Context, name string, args AdsproviderArgs, opts ...ResourceOption) (*Adsprovider, error)
public Adsprovider(string name, AdsproviderArgs args, CustomResourceOptions? opts = null)
public Adsprovider(String name, AdsproviderArgs args)
public Adsprovider(String name, AdsproviderArgs args, CustomResourceOptions options)
type: powerscale:Adsprovider
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AdsproviderArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AdsproviderArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AdsproviderArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AdsproviderArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AdsproviderArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var adsproviderResource = new Powerscale.Adsprovider("adsproviderResource", new()
{
    Password = "string",
    User = "string",
    AdsproviderId = "string",
    AllocateGids = false,
    AllocateUids = false,
    AssumeDefaultDomain = false,
    Authentication = false,
    CheckDuplicates = false,
    CheckOnlineInterval = 0,
    ControllerTime = 0,
    CreateHomeDirectory = false,
    DnsDomain = "string",
    DomainController = "string",
    DomainOfflineAlerts = false,
    ExtraExpectedSpns = new[]
    {
        "string",
    },
    FindableGroups = new[]
    {
        "string",
    },
    FindableUsers = new[]
    {
        "string",
    },
    Groupnet = "string",
    HomeDirectoryTemplate = "string",
    IgnoreAllTrusts = false,
    IgnoredTrustedDomains = new[]
    {
        "string",
    },
    IncludeTrustedDomains = new[]
    {
        "string",
    },
    Instance = "string",
    KerberosHdfsSpn = false,
    KerberosNfsSpn = false,
    LdapSignAndSeal = false,
    LoginShell = "string",
    LookupDomains = new[]
    {
        "string",
    },
    LookupGroups = false,
    LookupNormalizeGroups = false,
    LookupNormalizeUsers = false,
    LookupUsers = false,
    MachineAccount = "string",
    MachinePasswordChanges = false,
    MachinePasswordLifespan = 0,
    Name = "string",
    NodeDcAffinity = "string",
    NodeDcAffinityTimeout = 0,
    NssEnumeration = false,
    OrganizationalUnit = "string",
    ResetSchannel = false,
    RestrictFindable = false,
    RpcCallTimeout = 0,
    Scope = "string",
    ServerRetryLimit = 0,
    SfuSupport = "string",
    Spns = new[]
    {
        "string",
    },
    StoreSfuMappings = false,
    UnfindableGroups = new[]
    {
        "string",
    },
    UnfindableUsers = new[]
    {
        "string",
    },
});
Copy
example, err := powerscale.NewAdsprovider(ctx, "adsproviderResource", &powerscale.AdsproviderArgs{
	Password:            pulumi.String("string"),
	User:                pulumi.String("string"),
	AdsproviderId:       pulumi.String("string"),
	AllocateGids:        pulumi.Bool(false),
	AllocateUids:        pulumi.Bool(false),
	AssumeDefaultDomain: pulumi.Bool(false),
	Authentication:      pulumi.Bool(false),
	CheckDuplicates:     pulumi.Bool(false),
	CheckOnlineInterval: pulumi.Float64(0),
	ControllerTime:      pulumi.Float64(0),
	CreateHomeDirectory: pulumi.Bool(false),
	DnsDomain:           pulumi.String("string"),
	DomainController:    pulumi.String("string"),
	DomainOfflineAlerts: pulumi.Bool(false),
	ExtraExpectedSpns: pulumi.StringArray{
		pulumi.String("string"),
	},
	FindableGroups: pulumi.StringArray{
		pulumi.String("string"),
	},
	FindableUsers: pulumi.StringArray{
		pulumi.String("string"),
	},
	Groupnet:              pulumi.String("string"),
	HomeDirectoryTemplate: pulumi.String("string"),
	IgnoreAllTrusts:       pulumi.Bool(false),
	IgnoredTrustedDomains: pulumi.StringArray{
		pulumi.String("string"),
	},
	IncludeTrustedDomains: pulumi.StringArray{
		pulumi.String("string"),
	},
	Instance:        pulumi.String("string"),
	KerberosHdfsSpn: pulumi.Bool(false),
	KerberosNfsSpn:  pulumi.Bool(false),
	LdapSignAndSeal: pulumi.Bool(false),
	LoginShell:      pulumi.String("string"),
	LookupDomains: pulumi.StringArray{
		pulumi.String("string"),
	},
	LookupGroups:            pulumi.Bool(false),
	LookupNormalizeGroups:   pulumi.Bool(false),
	LookupNormalizeUsers:    pulumi.Bool(false),
	LookupUsers:             pulumi.Bool(false),
	MachineAccount:          pulumi.String("string"),
	MachinePasswordChanges:  pulumi.Bool(false),
	MachinePasswordLifespan: pulumi.Float64(0),
	Name:                    pulumi.String("string"),
	NodeDcAffinity:          pulumi.String("string"),
	NodeDcAffinityTimeout:   pulumi.Float64(0),
	NssEnumeration:          pulumi.Bool(false),
	OrganizationalUnit:      pulumi.String("string"),
	ResetSchannel:           pulumi.Bool(false),
	RestrictFindable:        pulumi.Bool(false),
	RpcCallTimeout:          pulumi.Float64(0),
	Scope:                   pulumi.String("string"),
	ServerRetryLimit:        pulumi.Float64(0),
	SfuSupport:              pulumi.String("string"),
	Spns: pulumi.StringArray{
		pulumi.String("string"),
	},
	StoreSfuMappings: pulumi.Bool(false),
	UnfindableGroups: pulumi.StringArray{
		pulumi.String("string"),
	},
	UnfindableUsers: pulumi.StringArray{
		pulumi.String("string"),
	},
})
Copy
var adsproviderResource = new Adsprovider("adsproviderResource", AdsproviderArgs.builder()
    .password("string")
    .user("string")
    .adsproviderId("string")
    .allocateGids(false)
    .allocateUids(false)
    .assumeDefaultDomain(false)
    .authentication(false)
    .checkDuplicates(false)
    .checkOnlineInterval(0)
    .controllerTime(0)
    .createHomeDirectory(false)
    .dnsDomain("string")
    .domainController("string")
    .domainOfflineAlerts(false)
    .extraExpectedSpns("string")
    .findableGroups("string")
    .findableUsers("string")
    .groupnet("string")
    .homeDirectoryTemplate("string")
    .ignoreAllTrusts(false)
    .ignoredTrustedDomains("string")
    .includeTrustedDomains("string")
    .instance("string")
    .kerberosHdfsSpn(false)
    .kerberosNfsSpn(false)
    .ldapSignAndSeal(false)
    .loginShell("string")
    .lookupDomains("string")
    .lookupGroups(false)
    .lookupNormalizeGroups(false)
    .lookupNormalizeUsers(false)
    .lookupUsers(false)
    .machineAccount("string")
    .machinePasswordChanges(false)
    .machinePasswordLifespan(0)
    .name("string")
    .nodeDcAffinity("string")
    .nodeDcAffinityTimeout(0)
    .nssEnumeration(false)
    .organizationalUnit("string")
    .resetSchannel(false)
    .restrictFindable(false)
    .rpcCallTimeout(0)
    .scope("string")
    .serverRetryLimit(0)
    .sfuSupport("string")
    .spns("string")
    .storeSfuMappings(false)
    .unfindableGroups("string")
    .unfindableUsers("string")
    .build());
Copy
adsprovider_resource = powerscale.Adsprovider("adsproviderResource",
    password="string",
    user="string",
    adsprovider_id="string",
    allocate_gids=False,
    allocate_uids=False,
    assume_default_domain=False,
    authentication=False,
    check_duplicates=False,
    check_online_interval=0,
    controller_time=0,
    create_home_directory=False,
    dns_domain="string",
    domain_controller="string",
    domain_offline_alerts=False,
    extra_expected_spns=["string"],
    findable_groups=["string"],
    findable_users=["string"],
    groupnet="string",
    home_directory_template="string",
    ignore_all_trusts=False,
    ignored_trusted_domains=["string"],
    include_trusted_domains=["string"],
    instance="string",
    kerberos_hdfs_spn=False,
    kerberos_nfs_spn=False,
    ldap_sign_and_seal=False,
    login_shell="string",
    lookup_domains=["string"],
    lookup_groups=False,
    lookup_normalize_groups=False,
    lookup_normalize_users=False,
    lookup_users=False,
    machine_account="string",
    machine_password_changes=False,
    machine_password_lifespan=0,
    name="string",
    node_dc_affinity="string",
    node_dc_affinity_timeout=0,
    nss_enumeration=False,
    organizational_unit="string",
    reset_schannel=False,
    restrict_findable=False,
    rpc_call_timeout=0,
    scope="string",
    server_retry_limit=0,
    sfu_support="string",
    spns=["string"],
    store_sfu_mappings=False,
    unfindable_groups=["string"],
    unfindable_users=["string"])
Copy
const adsproviderResource = new powerscale.Adsprovider("adsproviderResource", {
    password: "string",
    user: "string",
    adsproviderId: "string",
    allocateGids: false,
    allocateUids: false,
    assumeDefaultDomain: false,
    authentication: false,
    checkDuplicates: false,
    checkOnlineInterval: 0,
    controllerTime: 0,
    createHomeDirectory: false,
    dnsDomain: "string",
    domainController: "string",
    domainOfflineAlerts: false,
    extraExpectedSpns: ["string"],
    findableGroups: ["string"],
    findableUsers: ["string"],
    groupnet: "string",
    homeDirectoryTemplate: "string",
    ignoreAllTrusts: false,
    ignoredTrustedDomains: ["string"],
    includeTrustedDomains: ["string"],
    instance: "string",
    kerberosHdfsSpn: false,
    kerberosNfsSpn: false,
    ldapSignAndSeal: false,
    loginShell: "string",
    lookupDomains: ["string"],
    lookupGroups: false,
    lookupNormalizeGroups: false,
    lookupNormalizeUsers: false,
    lookupUsers: false,
    machineAccount: "string",
    machinePasswordChanges: false,
    machinePasswordLifespan: 0,
    name: "string",
    nodeDcAffinity: "string",
    nodeDcAffinityTimeout: 0,
    nssEnumeration: false,
    organizationalUnit: "string",
    resetSchannel: false,
    restrictFindable: false,
    rpcCallTimeout: 0,
    scope: "string",
    serverRetryLimit: 0,
    sfuSupport: "string",
    spns: ["string"],
    storeSfuMappings: false,
    unfindableGroups: ["string"],
    unfindableUsers: ["string"],
});
Copy
type: powerscale:Adsprovider
properties:
    adsproviderId: string
    allocateGids: false
    allocateUids: false
    assumeDefaultDomain: false
    authentication: false
    checkDuplicates: false
    checkOnlineInterval: 0
    controllerTime: 0
    createHomeDirectory: false
    dnsDomain: string
    domainController: string
    domainOfflineAlerts: false
    extraExpectedSpns:
        - string
    findableGroups:
        - string
    findableUsers:
        - string
    groupnet: string
    homeDirectoryTemplate: string
    ignoreAllTrusts: false
    ignoredTrustedDomains:
        - string
    includeTrustedDomains:
        - string
    instance: string
    kerberosHdfsSpn: false
    kerberosNfsSpn: false
    ldapSignAndSeal: false
    loginShell: string
    lookupDomains:
        - string
    lookupGroups: false
    lookupNormalizeGroups: false
    lookupNormalizeUsers: false
    lookupUsers: false
    machineAccount: string
    machinePasswordChanges: false
    machinePasswordLifespan: 0
    name: string
    nodeDcAffinity: string
    nodeDcAffinityTimeout: 0
    nssEnumeration: false
    organizationalUnit: string
    password: string
    resetSchannel: false
    restrictFindable: false
    rpcCallTimeout: 0
    scope: string
    serverRetryLimit: 0
    sfuSupport: string
    spns:
        - string
    storeSfuMappings: false
    unfindableGroups:
        - string
    unfindableUsers:
        - string
    user: string
Copy

Adsprovider Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Adsprovider resource accepts the following input properties:

Password This property is required. string
Specifies the password used during domain join.
User This property is required. string
Specifies the user name that has permission to join a machine to the given domain.
AdsproviderId string
Specifies the ID of the Active Directory provider instance.
AllocateGids bool
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
AllocateUids bool
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
AssumeDefaultDomain bool
Enables lookup of unqualified user names in the primary domain.
Authentication bool
Enables authentication and identity management through the authentication provider.
CheckDuplicates bool
Check for duplicate SPNs registered in Active Directory.
CheckOnlineInterval double
Specifies the time in seconds between provider online checks.
ControllerTime double
Specifies the current time for the domain controllers.
CreateHomeDirectory bool
Automatically creates a home directory on the first login.
DnsDomain string
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
DomainController string
Specifies the domain controller to which the authentication service should send requests
DomainOfflineAlerts bool
Sends an alert if the domain goes offline.
ExtraExpectedSpns List<string>
List of additional SPNs to expect beyond what automatic checking routines might find
FindableGroups List<string>
Sets list of groups that can be resolved.
FindableUsers List<string>
Sets list of users that can be resolved.
Groupnet string
Groupnet identifier.
HomeDirectoryTemplate string
Specifies the path to the home directory template.
IgnoreAllTrusts bool
If set to true, ignores all trusted domains.
IgnoredTrustedDomains List<string>
Includes trusted domains when 'ignorealltrusts' is set to false.
IncludeTrustedDomains List<string>
Includes trusted domains when 'ignorealltrusts' is set to true.
Instance string
Specifies Active Directory provider instance.
KerberosHdfsSpn bool
Determines if connecting through HDFS with Kerberos.
KerberosNfsSpn bool
Determines if connecting through NFS with Kerberos.
LdapSignAndSeal bool
Enables encryption and signing on LDAP requests.
LoginShell string
Specifies the login shell path.
LookupDomains List<string>
Limits user and group lookups to the specified domains.
LookupGroups bool
Looks up AD groups in other providers before allocating a group ID.
LookupNormalizeGroups bool
Normalizes AD group names to lowercase before look up.
LookupNormalizeUsers bool
Normalize AD user names to lowercase before look up.
LookupUsers bool
Looks up AD users in other providers before allocating a user ID.
MachineAccount string
Specifies the machine account name when creating a SAM account with Active Directory.
MachinePasswordChanges bool
Enables periodic changes of the machine password for security.
MachinePasswordLifespan double
Sets maximum age of a password in seconds.
Name string
Specifies the Active Directory provider name.
NodeDcAffinity string
Specifies the domain controller for which the node has affinity.
NodeDcAffinityTimeout double
Specifies the timeout for the domain controller for which the local node has affinity.
NssEnumeration bool
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
OrganizationalUnit string
Specifies the organizational unit.
ResetSchannel bool
Resets the secure channel to the primary domain.
RestrictFindable bool
Check the provider for filtered lists of findable and unfindable users and groups.
RpcCallTimeout double
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
Scope string
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
ServerRetryLimit double
The number of retries attempted when a call to Active Directory fails due to network error.
SfuSupport string
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
Spns List<string>
Currently configured SPNs.
StoreSfuMappings bool
Stores SFU mappings permanently in the ID mapper.
UnfindableGroups List<string>
Specifies groups that cannot be resolved by the provider.
UnfindableUsers List<string>
Specifies users that cannot be resolved by the provider.
Password This property is required. string
Specifies the password used during domain join.
User This property is required. string
Specifies the user name that has permission to join a machine to the given domain.
AdsproviderId string
Specifies the ID of the Active Directory provider instance.
AllocateGids bool
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
AllocateUids bool
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
AssumeDefaultDomain bool
Enables lookup of unqualified user names in the primary domain.
Authentication bool
Enables authentication and identity management through the authentication provider.
CheckDuplicates bool
Check for duplicate SPNs registered in Active Directory.
CheckOnlineInterval float64
Specifies the time in seconds between provider online checks.
ControllerTime float64
Specifies the current time for the domain controllers.
CreateHomeDirectory bool
Automatically creates a home directory on the first login.
DnsDomain string
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
DomainController string
Specifies the domain controller to which the authentication service should send requests
DomainOfflineAlerts bool
Sends an alert if the domain goes offline.
ExtraExpectedSpns []string
List of additional SPNs to expect beyond what automatic checking routines might find
FindableGroups []string
Sets list of groups that can be resolved.
FindableUsers []string
Sets list of users that can be resolved.
Groupnet string
Groupnet identifier.
HomeDirectoryTemplate string
Specifies the path to the home directory template.
IgnoreAllTrusts bool
If set to true, ignores all trusted domains.
IgnoredTrustedDomains []string
Includes trusted domains when 'ignorealltrusts' is set to false.
IncludeTrustedDomains []string
Includes trusted domains when 'ignorealltrusts' is set to true.
Instance string
Specifies Active Directory provider instance.
KerberosHdfsSpn bool
Determines if connecting through HDFS with Kerberos.
KerberosNfsSpn bool
Determines if connecting through NFS with Kerberos.
LdapSignAndSeal bool
Enables encryption and signing on LDAP requests.
LoginShell string
Specifies the login shell path.
LookupDomains []string
Limits user and group lookups to the specified domains.
LookupGroups bool
Looks up AD groups in other providers before allocating a group ID.
LookupNormalizeGroups bool
Normalizes AD group names to lowercase before look up.
LookupNormalizeUsers bool
Normalize AD user names to lowercase before look up.
LookupUsers bool
Looks up AD users in other providers before allocating a user ID.
MachineAccount string
Specifies the machine account name when creating a SAM account with Active Directory.
MachinePasswordChanges bool
Enables periodic changes of the machine password for security.
MachinePasswordLifespan float64
Sets maximum age of a password in seconds.
Name string
Specifies the Active Directory provider name.
NodeDcAffinity string
Specifies the domain controller for which the node has affinity.
NodeDcAffinityTimeout float64
Specifies the timeout for the domain controller for which the local node has affinity.
NssEnumeration bool
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
OrganizationalUnit string
Specifies the organizational unit.
ResetSchannel bool
Resets the secure channel to the primary domain.
RestrictFindable bool
Check the provider for filtered lists of findable and unfindable users and groups.
RpcCallTimeout float64
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
Scope string
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
ServerRetryLimit float64
The number of retries attempted when a call to Active Directory fails due to network error.
SfuSupport string
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
Spns []string
Currently configured SPNs.
StoreSfuMappings bool
Stores SFU mappings permanently in the ID mapper.
UnfindableGroups []string
Specifies groups that cannot be resolved by the provider.
UnfindableUsers []string
Specifies users that cannot be resolved by the provider.
password This property is required. String
Specifies the password used during domain join.
user This property is required. String
Specifies the user name that has permission to join a machine to the given domain.
adsproviderId String
Specifies the ID of the Active Directory provider instance.
allocateGids Boolean
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
allocateUids Boolean
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
assumeDefaultDomain Boolean
Enables lookup of unqualified user names in the primary domain.
authentication Boolean
Enables authentication and identity management through the authentication provider.
checkDuplicates Boolean
Check for duplicate SPNs registered in Active Directory.
checkOnlineInterval Double
Specifies the time in seconds between provider online checks.
controllerTime Double
Specifies the current time for the domain controllers.
createHomeDirectory Boolean
Automatically creates a home directory on the first login.
dnsDomain String
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
domainController String
Specifies the domain controller to which the authentication service should send requests
domainOfflineAlerts Boolean
Sends an alert if the domain goes offline.
extraExpectedSpns List<String>
List of additional SPNs to expect beyond what automatic checking routines might find
findableGroups List<String>
Sets list of groups that can be resolved.
findableUsers List<String>
Sets list of users that can be resolved.
groupnet String
Groupnet identifier.
homeDirectoryTemplate String
Specifies the path to the home directory template.
ignoreAllTrusts Boolean
If set to true, ignores all trusted domains.
ignoredTrustedDomains List<String>
Includes trusted domains when 'ignorealltrusts' is set to false.
includeTrustedDomains List<String>
Includes trusted domains when 'ignorealltrusts' is set to true.
instance String
Specifies Active Directory provider instance.
kerberosHdfsSpn Boolean
Determines if connecting through HDFS with Kerberos.
kerberosNfsSpn Boolean
Determines if connecting through NFS with Kerberos.
ldapSignAndSeal Boolean
Enables encryption and signing on LDAP requests.
loginShell String
Specifies the login shell path.
lookupDomains List<String>
Limits user and group lookups to the specified domains.
lookupGroups Boolean
Looks up AD groups in other providers before allocating a group ID.
lookupNormalizeGroups Boolean
Normalizes AD group names to lowercase before look up.
lookupNormalizeUsers Boolean
Normalize AD user names to lowercase before look up.
lookupUsers Boolean
Looks up AD users in other providers before allocating a user ID.
machineAccount String
Specifies the machine account name when creating a SAM account with Active Directory.
machinePasswordChanges Boolean
Enables periodic changes of the machine password for security.
machinePasswordLifespan Double
Sets maximum age of a password in seconds.
name String
Specifies the Active Directory provider name.
nodeDcAffinity String
Specifies the domain controller for which the node has affinity.
nodeDcAffinityTimeout Double
Specifies the timeout for the domain controller for which the local node has affinity.
nssEnumeration Boolean
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
organizationalUnit String
Specifies the organizational unit.
resetSchannel Boolean
Resets the secure channel to the primary domain.
restrictFindable Boolean
Check the provider for filtered lists of findable and unfindable users and groups.
rpcCallTimeout Double
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
scope String
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
serverRetryLimit Double
The number of retries attempted when a call to Active Directory fails due to network error.
sfuSupport String
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
spns List<String>
Currently configured SPNs.
storeSfuMappings Boolean
Stores SFU mappings permanently in the ID mapper.
unfindableGroups List<String>
Specifies groups that cannot be resolved by the provider.
unfindableUsers List<String>
Specifies users that cannot be resolved by the provider.
password This property is required. string
Specifies the password used during domain join.
user This property is required. string
Specifies the user name that has permission to join a machine to the given domain.
adsproviderId string
Specifies the ID of the Active Directory provider instance.
allocateGids boolean
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
allocateUids boolean
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
assumeDefaultDomain boolean
Enables lookup of unqualified user names in the primary domain.
authentication boolean
Enables authentication and identity management through the authentication provider.
checkDuplicates boolean
Check for duplicate SPNs registered in Active Directory.
checkOnlineInterval number
Specifies the time in seconds between provider online checks.
controllerTime number
Specifies the current time for the domain controllers.
createHomeDirectory boolean
Automatically creates a home directory on the first login.
dnsDomain string
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
domainController string
Specifies the domain controller to which the authentication service should send requests
domainOfflineAlerts boolean
Sends an alert if the domain goes offline.
extraExpectedSpns string[]
List of additional SPNs to expect beyond what automatic checking routines might find
findableGroups string[]
Sets list of groups that can be resolved.
findableUsers string[]
Sets list of users that can be resolved.
groupnet string
Groupnet identifier.
homeDirectoryTemplate string
Specifies the path to the home directory template.
ignoreAllTrusts boolean
If set to true, ignores all trusted domains.
ignoredTrustedDomains string[]
Includes trusted domains when 'ignorealltrusts' is set to false.
includeTrustedDomains string[]
Includes trusted domains when 'ignorealltrusts' is set to true.
instance string
Specifies Active Directory provider instance.
kerberosHdfsSpn boolean
Determines if connecting through HDFS with Kerberos.
kerberosNfsSpn boolean
Determines if connecting through NFS with Kerberos.
ldapSignAndSeal boolean
Enables encryption and signing on LDAP requests.
loginShell string
Specifies the login shell path.
lookupDomains string[]
Limits user and group lookups to the specified domains.
lookupGroups boolean
Looks up AD groups in other providers before allocating a group ID.
lookupNormalizeGroups boolean
Normalizes AD group names to lowercase before look up.
lookupNormalizeUsers boolean
Normalize AD user names to lowercase before look up.
lookupUsers boolean
Looks up AD users in other providers before allocating a user ID.
machineAccount string
Specifies the machine account name when creating a SAM account with Active Directory.
machinePasswordChanges boolean
Enables periodic changes of the machine password for security.
machinePasswordLifespan number
Sets maximum age of a password in seconds.
name string
Specifies the Active Directory provider name.
nodeDcAffinity string
Specifies the domain controller for which the node has affinity.
nodeDcAffinityTimeout number
Specifies the timeout for the domain controller for which the local node has affinity.
nssEnumeration boolean
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
organizationalUnit string
Specifies the organizational unit.
resetSchannel boolean
Resets the secure channel to the primary domain.
restrictFindable boolean
Check the provider for filtered lists of findable and unfindable users and groups.
rpcCallTimeout number
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
scope string
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
serverRetryLimit number
The number of retries attempted when a call to Active Directory fails due to network error.
sfuSupport string
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
spns string[]
Currently configured SPNs.
storeSfuMappings boolean
Stores SFU mappings permanently in the ID mapper.
unfindableGroups string[]
Specifies groups that cannot be resolved by the provider.
unfindableUsers string[]
Specifies users that cannot be resolved by the provider.
password This property is required. str
Specifies the password used during domain join.
user This property is required. str
Specifies the user name that has permission to join a machine to the given domain.
adsprovider_id str
Specifies the ID of the Active Directory provider instance.
allocate_gids bool
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
allocate_uids bool
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
assume_default_domain bool
Enables lookup of unqualified user names in the primary domain.
authentication bool
Enables authentication and identity management through the authentication provider.
check_duplicates bool
Check for duplicate SPNs registered in Active Directory.
check_online_interval float
Specifies the time in seconds between provider online checks.
controller_time float
Specifies the current time for the domain controllers.
create_home_directory bool
Automatically creates a home directory on the first login.
dns_domain str
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
domain_controller str
Specifies the domain controller to which the authentication service should send requests
domain_offline_alerts bool
Sends an alert if the domain goes offline.
extra_expected_spns Sequence[str]
List of additional SPNs to expect beyond what automatic checking routines might find
findable_groups Sequence[str]
Sets list of groups that can be resolved.
findable_users Sequence[str]
Sets list of users that can be resolved.
groupnet str
Groupnet identifier.
home_directory_template str
Specifies the path to the home directory template.
ignore_all_trusts bool
If set to true, ignores all trusted domains.
ignored_trusted_domains Sequence[str]
Includes trusted domains when 'ignorealltrusts' is set to false.
include_trusted_domains Sequence[str]
Includes trusted domains when 'ignorealltrusts' is set to true.
instance str
Specifies Active Directory provider instance.
kerberos_hdfs_spn bool
Determines if connecting through HDFS with Kerberos.
kerberos_nfs_spn bool
Determines if connecting through NFS with Kerberos.
ldap_sign_and_seal bool
Enables encryption and signing on LDAP requests.
login_shell str
Specifies the login shell path.
lookup_domains Sequence[str]
Limits user and group lookups to the specified domains.
lookup_groups bool
Looks up AD groups in other providers before allocating a group ID.
lookup_normalize_groups bool
Normalizes AD group names to lowercase before look up.
lookup_normalize_users bool
Normalize AD user names to lowercase before look up.
lookup_users bool
Looks up AD users in other providers before allocating a user ID.
machine_account str
Specifies the machine account name when creating a SAM account with Active Directory.
machine_password_changes bool
Enables periodic changes of the machine password for security.
machine_password_lifespan float
Sets maximum age of a password in seconds.
name str
Specifies the Active Directory provider name.
node_dc_affinity str
Specifies the domain controller for which the node has affinity.
node_dc_affinity_timeout float
Specifies the timeout for the domain controller for which the local node has affinity.
nss_enumeration bool
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
organizational_unit str
Specifies the organizational unit.
reset_schannel bool
Resets the secure channel to the primary domain.
restrict_findable bool
Check the provider for filtered lists of findable and unfindable users and groups.
rpc_call_timeout float
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
scope str
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
server_retry_limit float
The number of retries attempted when a call to Active Directory fails due to network error.
sfu_support str
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
spns Sequence[str]
Currently configured SPNs.
store_sfu_mappings bool
Stores SFU mappings permanently in the ID mapper.
unfindable_groups Sequence[str]
Specifies groups that cannot be resolved by the provider.
unfindable_users Sequence[str]
Specifies users that cannot be resolved by the provider.
password This property is required. String
Specifies the password used during domain join.
user This property is required. String
Specifies the user name that has permission to join a machine to the given domain.
adsproviderId String
Specifies the ID of the Active Directory provider instance.
allocateGids Boolean
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
allocateUids Boolean
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
assumeDefaultDomain Boolean
Enables lookup of unqualified user names in the primary domain.
authentication Boolean
Enables authentication and identity management through the authentication provider.
checkDuplicates Boolean
Check for duplicate SPNs registered in Active Directory.
checkOnlineInterval Number
Specifies the time in seconds between provider online checks.
controllerTime Number
Specifies the current time for the domain controllers.
createHomeDirectory Boolean
Automatically creates a home directory on the first login.
dnsDomain String
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
domainController String
Specifies the domain controller to which the authentication service should send requests
domainOfflineAlerts Boolean
Sends an alert if the domain goes offline.
extraExpectedSpns List<String>
List of additional SPNs to expect beyond what automatic checking routines might find
findableGroups List<String>
Sets list of groups that can be resolved.
findableUsers List<String>
Sets list of users that can be resolved.
groupnet String
Groupnet identifier.
homeDirectoryTemplate String
Specifies the path to the home directory template.
ignoreAllTrusts Boolean
If set to true, ignores all trusted domains.
ignoredTrustedDomains List<String>
Includes trusted domains when 'ignorealltrusts' is set to false.
includeTrustedDomains List<String>
Includes trusted domains when 'ignorealltrusts' is set to true.
instance String
Specifies Active Directory provider instance.
kerberosHdfsSpn Boolean
Determines if connecting through HDFS with Kerberos.
kerberosNfsSpn Boolean
Determines if connecting through NFS with Kerberos.
ldapSignAndSeal Boolean
Enables encryption and signing on LDAP requests.
loginShell String
Specifies the login shell path.
lookupDomains List<String>
Limits user and group lookups to the specified domains.
lookupGroups Boolean
Looks up AD groups in other providers before allocating a group ID.
lookupNormalizeGroups Boolean
Normalizes AD group names to lowercase before look up.
lookupNormalizeUsers Boolean
Normalize AD user names to lowercase before look up.
lookupUsers Boolean
Looks up AD users in other providers before allocating a user ID.
machineAccount String
Specifies the machine account name when creating a SAM account with Active Directory.
machinePasswordChanges Boolean
Enables periodic changes of the machine password for security.
machinePasswordLifespan Number
Sets maximum age of a password in seconds.
name String
Specifies the Active Directory provider name.
nodeDcAffinity String
Specifies the domain controller for which the node has affinity.
nodeDcAffinityTimeout Number
Specifies the timeout for the domain controller for which the local node has affinity.
nssEnumeration Boolean
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
organizationalUnit String
Specifies the organizational unit.
resetSchannel Boolean
Resets the secure channel to the primary domain.
restrictFindable Boolean
Check the provider for filtered lists of findable and unfindable users and groups.
rpcCallTimeout Number
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
scope String
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
serverRetryLimit Number
The number of retries attempted when a call to Active Directory fails due to network error.
sfuSupport String
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
spns List<String>
Currently configured SPNs.
storeSfuMappings Boolean
Stores SFU mappings permanently in the ID mapper.
unfindableGroups List<String>
Specifies groups that cannot be resolved by the provider.
unfindableUsers List<String>
Specifies users that cannot be resolved by the provider.

Outputs

All input properties are implicitly available as output properties. Additionally, the Adsprovider resource produces the following output properties:

DupSpns List<string>
Get duplicate SPNs in the provider domain
Forest string
Specifies the Active Directory forest.
Hostname string
Specifies the fully qualified hostname stored in the machine account.
Id string
The provider-assigned unique ID for this managed resource.
NetbiosDomain string
Specifies the NetBIOS domain name associated with the machine account.
PrimaryDomain string
Specifies the AD domain to which the provider is joined.
RecommendedSpns List<string>
Configuration recommended SPNs.
Site string
Specifies the site for the Active Directory.
Status string
Specifies the status of the provider.
System bool
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
ZoneName string
Specifies the name of the access zone in which this provider was created.
DupSpns []string
Get duplicate SPNs in the provider domain
Forest string
Specifies the Active Directory forest.
Hostname string
Specifies the fully qualified hostname stored in the machine account.
Id string
The provider-assigned unique ID for this managed resource.
NetbiosDomain string
Specifies the NetBIOS domain name associated with the machine account.
PrimaryDomain string
Specifies the AD domain to which the provider is joined.
RecommendedSpns []string
Configuration recommended SPNs.
Site string
Specifies the site for the Active Directory.
Status string
Specifies the status of the provider.
System bool
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
ZoneName string
Specifies the name of the access zone in which this provider was created.
dupSpns List<String>
Get duplicate SPNs in the provider domain
forest String
Specifies the Active Directory forest.
hostname String
Specifies the fully qualified hostname stored in the machine account.
id String
The provider-assigned unique ID for this managed resource.
netbiosDomain String
Specifies the NetBIOS domain name associated with the machine account.
primaryDomain String
Specifies the AD domain to which the provider is joined.
recommendedSpns List<String>
Configuration recommended SPNs.
site String
Specifies the site for the Active Directory.
status String
Specifies the status of the provider.
system Boolean
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
zoneName String
Specifies the name of the access zone in which this provider was created.
dupSpns string[]
Get duplicate SPNs in the provider domain
forest string
Specifies the Active Directory forest.
hostname string
Specifies the fully qualified hostname stored in the machine account.
id string
The provider-assigned unique ID for this managed resource.
netbiosDomain string
Specifies the NetBIOS domain name associated with the machine account.
primaryDomain string
Specifies the AD domain to which the provider is joined.
recommendedSpns string[]
Configuration recommended SPNs.
site string
Specifies the site for the Active Directory.
status string
Specifies the status of the provider.
system boolean
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
zoneName string
Specifies the name of the access zone in which this provider was created.
dup_spns Sequence[str]
Get duplicate SPNs in the provider domain
forest str
Specifies the Active Directory forest.
hostname str
Specifies the fully qualified hostname stored in the machine account.
id str
The provider-assigned unique ID for this managed resource.
netbios_domain str
Specifies the NetBIOS domain name associated with the machine account.
primary_domain str
Specifies the AD domain to which the provider is joined.
recommended_spns Sequence[str]
Configuration recommended SPNs.
site str
Specifies the site for the Active Directory.
status str
Specifies the status of the provider.
system bool
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
zone_name str
Specifies the name of the access zone in which this provider was created.
dupSpns List<String>
Get duplicate SPNs in the provider domain
forest String
Specifies the Active Directory forest.
hostname String
Specifies the fully qualified hostname stored in the machine account.
id String
The provider-assigned unique ID for this managed resource.
netbiosDomain String
Specifies the NetBIOS domain name associated with the machine account.
primaryDomain String
Specifies the AD domain to which the provider is joined.
recommendedSpns List<String>
Configuration recommended SPNs.
site String
Specifies the site for the Active Directory.
status String
Specifies the status of the provider.
system Boolean
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
zoneName String
Specifies the name of the access zone in which this provider was created.

Look up Existing Adsprovider Resource

Get an existing Adsprovider resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AdsproviderState, opts?: CustomResourceOptions): Adsprovider
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        adsprovider_id: Optional[str] = None,
        allocate_gids: Optional[bool] = None,
        allocate_uids: Optional[bool] = None,
        assume_default_domain: Optional[bool] = None,
        authentication: Optional[bool] = None,
        check_duplicates: Optional[bool] = None,
        check_online_interval: Optional[float] = None,
        controller_time: Optional[float] = None,
        create_home_directory: Optional[bool] = None,
        dns_domain: Optional[str] = None,
        domain_controller: Optional[str] = None,
        domain_offline_alerts: Optional[bool] = None,
        dup_spns: Optional[Sequence[str]] = None,
        extra_expected_spns: Optional[Sequence[str]] = None,
        findable_groups: Optional[Sequence[str]] = None,
        findable_users: Optional[Sequence[str]] = None,
        forest: Optional[str] = None,
        groupnet: Optional[str] = None,
        home_directory_template: Optional[str] = None,
        hostname: Optional[str] = None,
        ignore_all_trusts: Optional[bool] = None,
        ignored_trusted_domains: Optional[Sequence[str]] = None,
        include_trusted_domains: Optional[Sequence[str]] = None,
        instance: Optional[str] = None,
        kerberos_hdfs_spn: Optional[bool] = None,
        kerberos_nfs_spn: Optional[bool] = None,
        ldap_sign_and_seal: Optional[bool] = None,
        login_shell: Optional[str] = None,
        lookup_domains: Optional[Sequence[str]] = None,
        lookup_groups: Optional[bool] = None,
        lookup_normalize_groups: Optional[bool] = None,
        lookup_normalize_users: Optional[bool] = None,
        lookup_users: Optional[bool] = None,
        machine_account: Optional[str] = None,
        machine_password_changes: Optional[bool] = None,
        machine_password_lifespan: Optional[float] = None,
        name: Optional[str] = None,
        netbios_domain: Optional[str] = None,
        node_dc_affinity: Optional[str] = None,
        node_dc_affinity_timeout: Optional[float] = None,
        nss_enumeration: Optional[bool] = None,
        organizational_unit: Optional[str] = None,
        password: Optional[str] = None,
        primary_domain: Optional[str] = None,
        recommended_spns: Optional[Sequence[str]] = None,
        reset_schannel: Optional[bool] = None,
        restrict_findable: Optional[bool] = None,
        rpc_call_timeout: Optional[float] = None,
        scope: Optional[str] = None,
        server_retry_limit: Optional[float] = None,
        sfu_support: Optional[str] = None,
        site: Optional[str] = None,
        spns: Optional[Sequence[str]] = None,
        status: Optional[str] = None,
        store_sfu_mappings: Optional[bool] = None,
        system: Optional[bool] = None,
        unfindable_groups: Optional[Sequence[str]] = None,
        unfindable_users: Optional[Sequence[str]] = None,
        user: Optional[str] = None,
        zone_name: Optional[str] = None) -> Adsprovider
func GetAdsprovider(ctx *Context, name string, id IDInput, state *AdsproviderState, opts ...ResourceOption) (*Adsprovider, error)
public static Adsprovider Get(string name, Input<string> id, AdsproviderState? state, CustomResourceOptions? opts = null)
public static Adsprovider get(String name, Output<String> id, AdsproviderState state, CustomResourceOptions options)
resources:  _:    type: powerscale:Adsprovider    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AdsproviderId string
Specifies the ID of the Active Directory provider instance.
AllocateGids bool
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
AllocateUids bool
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
AssumeDefaultDomain bool
Enables lookup of unqualified user names in the primary domain.
Authentication bool
Enables authentication and identity management through the authentication provider.
CheckDuplicates bool
Check for duplicate SPNs registered in Active Directory.
CheckOnlineInterval double
Specifies the time in seconds between provider online checks.
ControllerTime double
Specifies the current time for the domain controllers.
CreateHomeDirectory bool
Automatically creates a home directory on the first login.
DnsDomain string
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
DomainController string
Specifies the domain controller to which the authentication service should send requests
DomainOfflineAlerts bool
Sends an alert if the domain goes offline.
DupSpns List<string>
Get duplicate SPNs in the provider domain
ExtraExpectedSpns List<string>
List of additional SPNs to expect beyond what automatic checking routines might find
FindableGroups List<string>
Sets list of groups that can be resolved.
FindableUsers List<string>
Sets list of users that can be resolved.
Forest string
Specifies the Active Directory forest.
Groupnet string
Groupnet identifier.
HomeDirectoryTemplate string
Specifies the path to the home directory template.
Hostname string
Specifies the fully qualified hostname stored in the machine account.
IgnoreAllTrusts bool
If set to true, ignores all trusted domains.
IgnoredTrustedDomains List<string>
Includes trusted domains when 'ignorealltrusts' is set to false.
IncludeTrustedDomains List<string>
Includes trusted domains when 'ignorealltrusts' is set to true.
Instance string
Specifies Active Directory provider instance.
KerberosHdfsSpn bool
Determines if connecting through HDFS with Kerberos.
KerberosNfsSpn bool
Determines if connecting through NFS with Kerberos.
LdapSignAndSeal bool
Enables encryption and signing on LDAP requests.
LoginShell string
Specifies the login shell path.
LookupDomains List<string>
Limits user and group lookups to the specified domains.
LookupGroups bool
Looks up AD groups in other providers before allocating a group ID.
LookupNormalizeGroups bool
Normalizes AD group names to lowercase before look up.
LookupNormalizeUsers bool
Normalize AD user names to lowercase before look up.
LookupUsers bool
Looks up AD users in other providers before allocating a user ID.
MachineAccount string
Specifies the machine account name when creating a SAM account with Active Directory.
MachinePasswordChanges bool
Enables periodic changes of the machine password for security.
MachinePasswordLifespan double
Sets maximum age of a password in seconds.
Name string
Specifies the Active Directory provider name.
NetbiosDomain string
Specifies the NetBIOS domain name associated with the machine account.
NodeDcAffinity string
Specifies the domain controller for which the node has affinity.
NodeDcAffinityTimeout double
Specifies the timeout for the domain controller for which the local node has affinity.
NssEnumeration bool
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
OrganizationalUnit string
Specifies the organizational unit.
Password string
Specifies the password used during domain join.
PrimaryDomain string
Specifies the AD domain to which the provider is joined.
RecommendedSpns List<string>
Configuration recommended SPNs.
ResetSchannel bool
Resets the secure channel to the primary domain.
RestrictFindable bool
Check the provider for filtered lists of findable and unfindable users and groups.
RpcCallTimeout double
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
Scope string
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
ServerRetryLimit double
The number of retries attempted when a call to Active Directory fails due to network error.
SfuSupport string
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
Site string
Specifies the site for the Active Directory.
Spns List<string>
Currently configured SPNs.
Status string
Specifies the status of the provider.
StoreSfuMappings bool
Stores SFU mappings permanently in the ID mapper.
System bool
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
UnfindableGroups List<string>
Specifies groups that cannot be resolved by the provider.
UnfindableUsers List<string>
Specifies users that cannot be resolved by the provider.
User string
Specifies the user name that has permission to join a machine to the given domain.
ZoneName string
Specifies the name of the access zone in which this provider was created.
AdsproviderId string
Specifies the ID of the Active Directory provider instance.
AllocateGids bool
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
AllocateUids bool
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
AssumeDefaultDomain bool
Enables lookup of unqualified user names in the primary domain.
Authentication bool
Enables authentication and identity management through the authentication provider.
CheckDuplicates bool
Check for duplicate SPNs registered in Active Directory.
CheckOnlineInterval float64
Specifies the time in seconds between provider online checks.
ControllerTime float64
Specifies the current time for the domain controllers.
CreateHomeDirectory bool
Automatically creates a home directory on the first login.
DnsDomain string
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
DomainController string
Specifies the domain controller to which the authentication service should send requests
DomainOfflineAlerts bool
Sends an alert if the domain goes offline.
DupSpns []string
Get duplicate SPNs in the provider domain
ExtraExpectedSpns []string
List of additional SPNs to expect beyond what automatic checking routines might find
FindableGroups []string
Sets list of groups that can be resolved.
FindableUsers []string
Sets list of users that can be resolved.
Forest string
Specifies the Active Directory forest.
Groupnet string
Groupnet identifier.
HomeDirectoryTemplate string
Specifies the path to the home directory template.
Hostname string
Specifies the fully qualified hostname stored in the machine account.
IgnoreAllTrusts bool
If set to true, ignores all trusted domains.
IgnoredTrustedDomains []string
Includes trusted domains when 'ignorealltrusts' is set to false.
IncludeTrustedDomains []string
Includes trusted domains when 'ignorealltrusts' is set to true.
Instance string
Specifies Active Directory provider instance.
KerberosHdfsSpn bool
Determines if connecting through HDFS with Kerberos.
KerberosNfsSpn bool
Determines if connecting through NFS with Kerberos.
LdapSignAndSeal bool
Enables encryption and signing on LDAP requests.
LoginShell string
Specifies the login shell path.
LookupDomains []string
Limits user and group lookups to the specified domains.
LookupGroups bool
Looks up AD groups in other providers before allocating a group ID.
LookupNormalizeGroups bool
Normalizes AD group names to lowercase before look up.
LookupNormalizeUsers bool
Normalize AD user names to lowercase before look up.
LookupUsers bool
Looks up AD users in other providers before allocating a user ID.
MachineAccount string
Specifies the machine account name when creating a SAM account with Active Directory.
MachinePasswordChanges bool
Enables periodic changes of the machine password for security.
MachinePasswordLifespan float64
Sets maximum age of a password in seconds.
Name string
Specifies the Active Directory provider name.
NetbiosDomain string
Specifies the NetBIOS domain name associated with the machine account.
NodeDcAffinity string
Specifies the domain controller for which the node has affinity.
NodeDcAffinityTimeout float64
Specifies the timeout for the domain controller for which the local node has affinity.
NssEnumeration bool
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
OrganizationalUnit string
Specifies the organizational unit.
Password string
Specifies the password used during domain join.
PrimaryDomain string
Specifies the AD domain to which the provider is joined.
RecommendedSpns []string
Configuration recommended SPNs.
ResetSchannel bool
Resets the secure channel to the primary domain.
RestrictFindable bool
Check the provider for filtered lists of findable and unfindable users and groups.
RpcCallTimeout float64
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
Scope string
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
ServerRetryLimit float64
The number of retries attempted when a call to Active Directory fails due to network error.
SfuSupport string
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
Site string
Specifies the site for the Active Directory.
Spns []string
Currently configured SPNs.
Status string
Specifies the status of the provider.
StoreSfuMappings bool
Stores SFU mappings permanently in the ID mapper.
System bool
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
UnfindableGroups []string
Specifies groups that cannot be resolved by the provider.
UnfindableUsers []string
Specifies users that cannot be resolved by the provider.
User string
Specifies the user name that has permission to join a machine to the given domain.
ZoneName string
Specifies the name of the access zone in which this provider was created.
adsproviderId String
Specifies the ID of the Active Directory provider instance.
allocateGids Boolean
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
allocateUids Boolean
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
assumeDefaultDomain Boolean
Enables lookup of unqualified user names in the primary domain.
authentication Boolean
Enables authentication and identity management through the authentication provider.
checkDuplicates Boolean
Check for duplicate SPNs registered in Active Directory.
checkOnlineInterval Double
Specifies the time in seconds between provider online checks.
controllerTime Double
Specifies the current time for the domain controllers.
createHomeDirectory Boolean
Automatically creates a home directory on the first login.
dnsDomain String
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
domainController String
Specifies the domain controller to which the authentication service should send requests
domainOfflineAlerts Boolean
Sends an alert if the domain goes offline.
dupSpns List<String>
Get duplicate SPNs in the provider domain
extraExpectedSpns List<String>
List of additional SPNs to expect beyond what automatic checking routines might find
findableGroups List<String>
Sets list of groups that can be resolved.
findableUsers List<String>
Sets list of users that can be resolved.
forest String
Specifies the Active Directory forest.
groupnet String
Groupnet identifier.
homeDirectoryTemplate String
Specifies the path to the home directory template.
hostname String
Specifies the fully qualified hostname stored in the machine account.
ignoreAllTrusts Boolean
If set to true, ignores all trusted domains.
ignoredTrustedDomains List<String>
Includes trusted domains when 'ignorealltrusts' is set to false.
includeTrustedDomains List<String>
Includes trusted domains when 'ignorealltrusts' is set to true.
instance String
Specifies Active Directory provider instance.
kerberosHdfsSpn Boolean
Determines if connecting through HDFS with Kerberos.
kerberosNfsSpn Boolean
Determines if connecting through NFS with Kerberos.
ldapSignAndSeal Boolean
Enables encryption and signing on LDAP requests.
loginShell String
Specifies the login shell path.
lookupDomains List<String>
Limits user and group lookups to the specified domains.
lookupGroups Boolean
Looks up AD groups in other providers before allocating a group ID.
lookupNormalizeGroups Boolean
Normalizes AD group names to lowercase before look up.
lookupNormalizeUsers Boolean
Normalize AD user names to lowercase before look up.
lookupUsers Boolean
Looks up AD users in other providers before allocating a user ID.
machineAccount String
Specifies the machine account name when creating a SAM account with Active Directory.
machinePasswordChanges Boolean
Enables periodic changes of the machine password for security.
machinePasswordLifespan Double
Sets maximum age of a password in seconds.
name String
Specifies the Active Directory provider name.
netbiosDomain String
Specifies the NetBIOS domain name associated with the machine account.
nodeDcAffinity String
Specifies the domain controller for which the node has affinity.
nodeDcAffinityTimeout Double
Specifies the timeout for the domain controller for which the local node has affinity.
nssEnumeration Boolean
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
organizationalUnit String
Specifies the organizational unit.
password String
Specifies the password used during domain join.
primaryDomain String
Specifies the AD domain to which the provider is joined.
recommendedSpns List<String>
Configuration recommended SPNs.
resetSchannel Boolean
Resets the secure channel to the primary domain.
restrictFindable Boolean
Check the provider for filtered lists of findable and unfindable users and groups.
rpcCallTimeout Double
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
scope String
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
serverRetryLimit Double
The number of retries attempted when a call to Active Directory fails due to network error.
sfuSupport String
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
site String
Specifies the site for the Active Directory.
spns List<String>
Currently configured SPNs.
status String
Specifies the status of the provider.
storeSfuMappings Boolean
Stores SFU mappings permanently in the ID mapper.
system Boolean
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
unfindableGroups List<String>
Specifies groups that cannot be resolved by the provider.
unfindableUsers List<String>
Specifies users that cannot be resolved by the provider.
user String
Specifies the user name that has permission to join a machine to the given domain.
zoneName String
Specifies the name of the access zone in which this provider was created.
adsproviderId string
Specifies the ID of the Active Directory provider instance.
allocateGids boolean
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
allocateUids boolean
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
assumeDefaultDomain boolean
Enables lookup of unqualified user names in the primary domain.
authentication boolean
Enables authentication and identity management through the authentication provider.
checkDuplicates boolean
Check for duplicate SPNs registered in Active Directory.
checkOnlineInterval number
Specifies the time in seconds between provider online checks.
controllerTime number
Specifies the current time for the domain controllers.
createHomeDirectory boolean
Automatically creates a home directory on the first login.
dnsDomain string
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
domainController string
Specifies the domain controller to which the authentication service should send requests
domainOfflineAlerts boolean
Sends an alert if the domain goes offline.
dupSpns string[]
Get duplicate SPNs in the provider domain
extraExpectedSpns string[]
List of additional SPNs to expect beyond what automatic checking routines might find
findableGroups string[]
Sets list of groups that can be resolved.
findableUsers string[]
Sets list of users that can be resolved.
forest string
Specifies the Active Directory forest.
groupnet string
Groupnet identifier.
homeDirectoryTemplate string
Specifies the path to the home directory template.
hostname string
Specifies the fully qualified hostname stored in the machine account.
ignoreAllTrusts boolean
If set to true, ignores all trusted domains.
ignoredTrustedDomains string[]
Includes trusted domains when 'ignorealltrusts' is set to false.
includeTrustedDomains string[]
Includes trusted domains when 'ignorealltrusts' is set to true.
instance string
Specifies Active Directory provider instance.
kerberosHdfsSpn boolean
Determines if connecting through HDFS with Kerberos.
kerberosNfsSpn boolean
Determines if connecting through NFS with Kerberos.
ldapSignAndSeal boolean
Enables encryption and signing on LDAP requests.
loginShell string
Specifies the login shell path.
lookupDomains string[]
Limits user and group lookups to the specified domains.
lookupGroups boolean
Looks up AD groups in other providers before allocating a group ID.
lookupNormalizeGroups boolean
Normalizes AD group names to lowercase before look up.
lookupNormalizeUsers boolean
Normalize AD user names to lowercase before look up.
lookupUsers boolean
Looks up AD users in other providers before allocating a user ID.
machineAccount string
Specifies the machine account name when creating a SAM account with Active Directory.
machinePasswordChanges boolean
Enables periodic changes of the machine password for security.
machinePasswordLifespan number
Sets maximum age of a password in seconds.
name string
Specifies the Active Directory provider name.
netbiosDomain string
Specifies the NetBIOS domain name associated with the machine account.
nodeDcAffinity string
Specifies the domain controller for which the node has affinity.
nodeDcAffinityTimeout number
Specifies the timeout for the domain controller for which the local node has affinity.
nssEnumeration boolean
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
organizationalUnit string
Specifies the organizational unit.
password string
Specifies the password used during domain join.
primaryDomain string
Specifies the AD domain to which the provider is joined.
recommendedSpns string[]
Configuration recommended SPNs.
resetSchannel boolean
Resets the secure channel to the primary domain.
restrictFindable boolean
Check the provider for filtered lists of findable and unfindable users and groups.
rpcCallTimeout number
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
scope string
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
serverRetryLimit number
The number of retries attempted when a call to Active Directory fails due to network error.
sfuSupport string
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
site string
Specifies the site for the Active Directory.
spns string[]
Currently configured SPNs.
status string
Specifies the status of the provider.
storeSfuMappings boolean
Stores SFU mappings permanently in the ID mapper.
system boolean
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
unfindableGroups string[]
Specifies groups that cannot be resolved by the provider.
unfindableUsers string[]
Specifies users that cannot be resolved by the provider.
user string
Specifies the user name that has permission to join a machine to the given domain.
zoneName string
Specifies the name of the access zone in which this provider was created.
adsprovider_id str
Specifies the ID of the Active Directory provider instance.
allocate_gids bool
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
allocate_uids bool
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
assume_default_domain bool
Enables lookup of unqualified user names in the primary domain.
authentication bool
Enables authentication and identity management through the authentication provider.
check_duplicates bool
Check for duplicate SPNs registered in Active Directory.
check_online_interval float
Specifies the time in seconds between provider online checks.
controller_time float
Specifies the current time for the domain controllers.
create_home_directory bool
Automatically creates a home directory on the first login.
dns_domain str
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
domain_controller str
Specifies the domain controller to which the authentication service should send requests
domain_offline_alerts bool
Sends an alert if the domain goes offline.
dup_spns Sequence[str]
Get duplicate SPNs in the provider domain
extra_expected_spns Sequence[str]
List of additional SPNs to expect beyond what automatic checking routines might find
findable_groups Sequence[str]
Sets list of groups that can be resolved.
findable_users Sequence[str]
Sets list of users that can be resolved.
forest str
Specifies the Active Directory forest.
groupnet str
Groupnet identifier.
home_directory_template str
Specifies the path to the home directory template.
hostname str
Specifies the fully qualified hostname stored in the machine account.
ignore_all_trusts bool
If set to true, ignores all trusted domains.
ignored_trusted_domains Sequence[str]
Includes trusted domains when 'ignorealltrusts' is set to false.
include_trusted_domains Sequence[str]
Includes trusted domains when 'ignorealltrusts' is set to true.
instance str
Specifies Active Directory provider instance.
kerberos_hdfs_spn bool
Determines if connecting through HDFS with Kerberos.
kerberos_nfs_spn bool
Determines if connecting through NFS with Kerberos.
ldap_sign_and_seal bool
Enables encryption and signing on LDAP requests.
login_shell str
Specifies the login shell path.
lookup_domains Sequence[str]
Limits user and group lookups to the specified domains.
lookup_groups bool
Looks up AD groups in other providers before allocating a group ID.
lookup_normalize_groups bool
Normalizes AD group names to lowercase before look up.
lookup_normalize_users bool
Normalize AD user names to lowercase before look up.
lookup_users bool
Looks up AD users in other providers before allocating a user ID.
machine_account str
Specifies the machine account name when creating a SAM account with Active Directory.
machine_password_changes bool
Enables periodic changes of the machine password for security.
machine_password_lifespan float
Sets maximum age of a password in seconds.
name str
Specifies the Active Directory provider name.
netbios_domain str
Specifies the NetBIOS domain name associated with the machine account.
node_dc_affinity str
Specifies the domain controller for which the node has affinity.
node_dc_affinity_timeout float
Specifies the timeout for the domain controller for which the local node has affinity.
nss_enumeration bool
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
organizational_unit str
Specifies the organizational unit.
password str
Specifies the password used during domain join.
primary_domain str
Specifies the AD domain to which the provider is joined.
recommended_spns Sequence[str]
Configuration recommended SPNs.
reset_schannel bool
Resets the secure channel to the primary domain.
restrict_findable bool
Check the provider for filtered lists of findable and unfindable users and groups.
rpc_call_timeout float
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
scope str
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
server_retry_limit float
The number of retries attempted when a call to Active Directory fails due to network error.
sfu_support str
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
site str
Specifies the site for the Active Directory.
spns Sequence[str]
Currently configured SPNs.
status str
Specifies the status of the provider.
store_sfu_mappings bool
Stores SFU mappings permanently in the ID mapper.
system bool
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
unfindable_groups Sequence[str]
Specifies groups that cannot be resolved by the provider.
unfindable_users Sequence[str]
Specifies users that cannot be resolved by the provider.
user str
Specifies the user name that has permission to join a machine to the given domain.
zone_name str
Specifies the name of the access zone in which this provider was created.
adsproviderId String
Specifies the ID of the Active Directory provider instance.
allocateGids Boolean
Allocates an ID for an unmapped Active Directory (ADS) group. ADS groups without GIDs can be proactively assigned a GID by the ID mapper. If the ID mapper option is disabled, GIDs are not proactively assigned, and when a primary group for a user does not include a GID, the system may allocate one.
allocateUids Boolean
Allocates a user ID for an unmapped Active Directory (ADS) user. ADS users without UIDs can be proactively assigned a UID by the ID mapper. IF the ID mapper option is disabled, UIDs are not proactively assigned, and when an identify for a user does not include a UID, the system may allocate one.
assumeDefaultDomain Boolean
Enables lookup of unqualified user names in the primary domain.
authentication Boolean
Enables authentication and identity management through the authentication provider.
checkDuplicates Boolean
Check for duplicate SPNs registered in Active Directory.
checkOnlineInterval Number
Specifies the time in seconds between provider online checks.
controllerTime Number
Specifies the current time for the domain controllers.
createHomeDirectory Boolean
Automatically creates a home directory on the first login.
dnsDomain String
Specifies the DNS search domain. Set this parameter if the DNS search domain has a unique name or address.
domainController String
Specifies the domain controller to which the authentication service should send requests
domainOfflineAlerts Boolean
Sends an alert if the domain goes offline.
dupSpns List<String>
Get duplicate SPNs in the provider domain
extraExpectedSpns List<String>
List of additional SPNs to expect beyond what automatic checking routines might find
findableGroups List<String>
Sets list of groups that can be resolved.
findableUsers List<String>
Sets list of users that can be resolved.
forest String
Specifies the Active Directory forest.
groupnet String
Groupnet identifier.
homeDirectoryTemplate String
Specifies the path to the home directory template.
hostname String
Specifies the fully qualified hostname stored in the machine account.
ignoreAllTrusts Boolean
If set to true, ignores all trusted domains.
ignoredTrustedDomains List<String>
Includes trusted domains when 'ignorealltrusts' is set to false.
includeTrustedDomains List<String>
Includes trusted domains when 'ignorealltrusts' is set to true.
instance String
Specifies Active Directory provider instance.
kerberosHdfsSpn Boolean
Determines if connecting through HDFS with Kerberos.
kerberosNfsSpn Boolean
Determines if connecting through NFS with Kerberos.
ldapSignAndSeal Boolean
Enables encryption and signing on LDAP requests.
loginShell String
Specifies the login shell path.
lookupDomains List<String>
Limits user and group lookups to the specified domains.
lookupGroups Boolean
Looks up AD groups in other providers before allocating a group ID.
lookupNormalizeGroups Boolean
Normalizes AD group names to lowercase before look up.
lookupNormalizeUsers Boolean
Normalize AD user names to lowercase before look up.
lookupUsers Boolean
Looks up AD users in other providers before allocating a user ID.
machineAccount String
Specifies the machine account name when creating a SAM account with Active Directory.
machinePasswordChanges Boolean
Enables periodic changes of the machine password for security.
machinePasswordLifespan Number
Sets maximum age of a password in seconds.
name String
Specifies the Active Directory provider name.
netbiosDomain String
Specifies the NetBIOS domain name associated with the machine account.
nodeDcAffinity String
Specifies the domain controller for which the node has affinity.
nodeDcAffinityTimeout Number
Specifies the timeout for the domain controller for which the local node has affinity.
nssEnumeration Boolean
Enables the Active Directory provider to respond to 'getpwent' and 'getgrent' requests.
organizationalUnit String
Specifies the organizational unit.
password String
Specifies the password used during domain join.
primaryDomain String
Specifies the AD domain to which the provider is joined.
recommendedSpns List<String>
Configuration recommended SPNs.
resetSchannel Boolean
Resets the secure channel to the primary domain.
restrictFindable Boolean
Check the provider for filtered lists of findable and unfindable users and groups.
rpcCallTimeout Number
The maximum amount of time (in seconds) an RPC call to Active Directory is allowed to take.
scope String
When specified as 'effective', or not specified, all fields are returned. When specified as 'user', only fields with non-default values are shown. When specified as 'default', the original values are returned.
serverRetryLimit Number
The number of retries attempted when a call to Active Directory fails due to network error.
sfuSupport String
Specifies whether to support RFC 2307 attributes on ADS domain controllers.
site String
Specifies the site for the Active Directory.
spns List<String>
Currently configured SPNs.
status String
Specifies the status of the provider.
storeSfuMappings Boolean
Stores SFU mappings permanently in the ID mapper.
system Boolean
If set to true, indicates that this provider instance was created by OneFS and cannot be removed.
unfindableGroups List<String>
Specifies groups that cannot be resolved by the provider.
unfindableUsers List<String>
Specifies users that cannot be resolved by the provider.
user String
Specifies the user name that has permission to join a machine to the given domain.
zoneName String
Specifies the name of the access zone in which this provider was created.

Import

Copyright (c) 2023-2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the “License”);

you may not use this file except in compliance with the License.

You may obtain a copy of the License at

http://mozilla.org/MPL/2.0/

Unless required by applicable law or agreed to in writing, software

distributed under the License is distributed on an “AS IS” BASIS,

WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

See the License for the specific language governing permissions and

limitations under the License.

The command is

$ pulumi import powerscale:index/adsprovider:Adsprovider ads_test <name>
Copy

Example:

$ pulumi import powerscale:index/adsprovider:Adsprovider ads_test ads_id
Copy

after running this command, populate the name field and other required parameters in the config file to start managing this resource.

Note: running “terraform show” after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
powerscale dell/terraform-provider-powerscale
License
Notes
This Pulumi package is based on the powerscale Terraform Provider.