Package com.strongdm.api
Class SQLServerKerberosAD
java.lang.Object
com.strongdm.api.SQLServerKerberosAD
- All Implemented Interfaces:
Resource
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionbooleanWhether to allow deprecated encryption protocols to be used for this resource.The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1).The database for healthchecks, and used for clients if Override Default Database is true.A filter applied to the routing logic to pin datasource to nodes.booleanTrue if the datasource is reachable and the credentials are valid.The host to dial to initiate a connection from the egress node to this resource.getId()Unique identifier of the Resource.The keytab file in base64 format containing an entry with the principal name (username@realm) and key version number with which to authenticate.The Kerberos 5 configuration file (krb5.conf) specifying the Active Directory server (KDC) for the configured realm.getName()Unique human-readable name of the Resource.booleanIf set, the database configured cannot be changed by users.intgetPort()The port to dial to initiate a connection from the egress node to this resource.intThe local port used by clients to connect to this resource.ID of the proxy cluster for this resource, if any.getRealm()The Active Directory domain (realm) to which the configured username belongs.The Schema to use to direct initial requests.ID of the secret store containing credentials for this resource, if any.The Service Principal Name of the Microsoft SQL Server instance in Active Directory.DNS subdomain through which this resource may be accessed on clients.getTags()Tags is a map of key, value pairs.The username to authenticate with.voidsetAllowDeprecatedEncryption(boolean in) Whether to allow deprecated encryption protocols to be used for this resource.voidThe bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1).voidsetDatabase(String in) The database for healthchecks, and used for clients if Override Default Database is true.voidA filter applied to the routing logic to pin datasource to nodes.voidsetHealthy(boolean in) True if the datasource is reachable and the credentials are valid.voidsetHostname(String in) The host to dial to initiate a connection from the egress node to this resource.voidUnique identifier of the Resource.voidThe keytab file in base64 format containing an entry with the principal name (username@realm) and key version number with which to authenticate.voidsetKrbConfig(String in) The Kerberos 5 configuration file (krb5.conf) specifying the Active Directory server (KDC) for the configured realm.voidUnique human-readable name of the Resource.voidsetOverrideDatabase(boolean in) If set, the database configured cannot be changed by users.voidsetPort(int in) The port to dial to initiate a connection from the egress node to this resource.voidsetPortOverride(int in) The local port used by clients to connect to this resource.voidID of the proxy cluster for this resource, if any.voidThe Active Directory domain (realm) to which the configured username belongs.voidThe Schema to use to direct initial requests.voidID of the secret store containing credentials for this resource, if any.voidsetServerSpn(String in) The Service Principal Name of the Microsoft SQL Server instance in Active Directory.voidsetSubdomain(String in) DNS subdomain through which this resource may be accessed on clients.voidTags is a map of key, value pairs.voidsetUsername(String in) The username to authenticate with.
-
Constructor Details
-
SQLServerKerberosAD
public SQLServerKerberosAD()
-
-
Method Details
-
getAllowDeprecatedEncryption
public boolean getAllowDeprecatedEncryption()Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0. -
setAllowDeprecatedEncryption
public void setAllowDeprecatedEncryption(boolean in) Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0. -
getBindInterface
The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation.- Specified by:
getBindInterfacein interfaceResource
-
setBindInterface
The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation.- Specified by:
setBindInterfacein interfaceResource
-
getDatabase
The database for healthchecks, and used for clients if Override Default Database is true. -
setDatabase
The database for healthchecks, and used for clients if Override Default Database is true. -
getEgressFilter
A filter applied to the routing logic to pin datasource to nodes.- Specified by:
getEgressFilterin interfaceResource
-
setEgressFilter
A filter applied to the routing logic to pin datasource to nodes.- Specified by:
setEgressFilterin interfaceResource
-
getHealthy
public boolean getHealthy()True if the datasource is reachable and the credentials are valid. -
setHealthy
public void setHealthy(boolean in) True if the datasource is reachable and the credentials are valid. -
getHostname
The host to dial to initiate a connection from the egress node to this resource. -
setHostname
The host to dial to initiate a connection from the egress node to this resource. -
getId
Unique identifier of the Resource. -
setId
Unique identifier of the Resource. -
getKeytab
The keytab file in base64 format containing an entry with the principal name (username@realm) and key version number with which to authenticate. -
setKeytab
The keytab file in base64 format containing an entry with the principal name (username@realm) and key version number with which to authenticate. -
getKrbConfig
The Kerberos 5 configuration file (krb5.conf) specifying the Active Directory server (KDC) for the configured realm. -
setKrbConfig
The Kerberos 5 configuration file (krb5.conf) specifying the Active Directory server (KDC) for the configured realm. -
getName
Unique human-readable name of the Resource. -
setName
Unique human-readable name of the Resource. -
getOverrideDatabase
public boolean getOverrideDatabase()If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. -
setOverrideDatabase
public void setOverrideDatabase(boolean in) If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. -
getPort
public int getPort()The port to dial to initiate a connection from the egress node to this resource. -
setPort
public void setPort(int in) The port to dial to initiate a connection from the egress node to this resource. -
getPortOverride
public int getPortOverride()The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. -
setPortOverride
public void setPortOverride(int in) The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. -
getProxyClusterId
ID of the proxy cluster for this resource, if any. -
setProxyClusterId
ID of the proxy cluster for this resource, if any. -
getRealm
The Active Directory domain (realm) to which the configured username belongs. -
setRealm
The Active Directory domain (realm) to which the configured username belongs. -
getSchema
The Schema to use to direct initial requests. -
setSchema
The Schema to use to direct initial requests. -
getSecretStoreId
ID of the secret store containing credentials for this resource, if any.- Specified by:
getSecretStoreIdin interfaceResource
-
setSecretStoreId
ID of the secret store containing credentials for this resource, if any.- Specified by:
setSecretStoreIdin interfaceResource
-
getServerSpn
The Service Principal Name of the Microsoft SQL Server instance in Active Directory. -
setServerSpn
The Service Principal Name of the Microsoft SQL Server instance in Active Directory. -
getSubdomain
DNS subdomain through which this resource may be accessed on clients. (e.g. "app-prod1" allows the resource to be accessed at "app-prod1.your-org-name.sdm-proxy-domain"). Only applicable to HTTP-based resources or resources using virtual networking mode. -
setSubdomain
DNS subdomain through which this resource may be accessed on clients. (e.g. "app-prod1" allows the resource to be accessed at "app-prod1.your-org-name.sdm-proxy-domain"). Only applicable to HTTP-based resources or resources using virtual networking mode. -
getTags
Tags is a map of key, value pairs. -
setTags
Tags is a map of key, value pairs. -
getUsername
The username to authenticate with. -
setUsername
The username to authenticate with.
-