},
"ldap": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"request": {
"type": "object",
"properties": {
"abandon_request": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"message_id": {
"type": "integer"
},
"add_request": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"attributes": {
"type": "array",
"minItems": 1,
"items": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"name": {
"type": "string"
},
"bind_request": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"name": {
"type": "string"
},
"sasl": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"credentials": {
"type": "string",
},
"compare_request": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"attribute_value_assertion": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"description": {
"type": "string"
},
"del_request": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"dn": {
"type": "string"
},
"extended_request": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"name": {
"type": "string"
},
"mod_dn_request": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"delete_old_rdn": {
"type": "boolean"
},
"modify_request": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"changes": {
"type": "array",
"minItems": 1,
"items": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"modification": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"attribute_type": {
"type": "string"
"optional": "true"
},
"operation": {
- "type": "string"
+ "type": "string",
+ "suricata": {
+ "keywords": [
+ "ldap.request.operation"
+ ]
+ }
},
"search_request": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"attributes": {
"type": "array",
},
"types_online": {
"type": "boolean"
+ },
+ "types_only": {
+ "type": "boolean"
}
},
"optional": "true"
"type": "array",
"optional": "true",
"minItems": 1,
+ "suricata": {
+ "keywords": [
+ "ldap.responses.count"
+ ]
+ },
"items": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"add_response": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"matched_dn": {
"type": "string"
"type": "string"
},
"result_code": {
- "type": "string"
+ "type": "string",
+ "suricata": {
+ "keywords": [
+ "ldap.responses.result_code"
+ ]
+ }
}
},
"optional": "true"
},
"bind_response": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"matched_dn": {
"type": "string"
"type": "string"
},
"result_code": {
- "type": "string"
+ "type": "string",
+ "suricata": {
+ "keywords": [
+ "ldap.responses.result_code"
+ ]
+ }
},
"server_sasl_creds": {
"type": "string",
},
"compare_response": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"matched_dn": {
"type": "string"
"type": "string"
},
"result_code": {
- "type": "string"
+ "type": "string",
+ "suricata": {
+ "keywords": [
+ "ldap.responses.result_code"
+ ]
+ }
}
},
"optional": "true"
},
"del_response": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"matched_dn": {
"type": "string"
"type": "string"
},
"result_code": {
- "type": "string"
+ "type": "string",
+ "suricata": {
+ "keywords": [
+ "ldap.responses.result_code"
+ ]
+ }
}
},
"optional": "true"
},
"extended_response": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"matched_dn": {
"type": "string"
"type": "string"
},
"result_code": {
- "type": "string"
+ "type": "string",
+ "suricata": {
+ "keywords": [
+ "ldap.responses.result_code"
+ ]
+ }
},
"value": {
"type": "string"
},
"intermediate_response": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"name": {
"type": "string"
},
"optional": "true"
},
+ "message_id": {
+ "type": "integer"
+ },
"mod_dn_response": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"matched_dn": {
"type": "string"
"type": "string"
},
"result_code": {
- "type": "string"
+ "type": "string",
+ "suricata": {
+ "keywords": [
+ "ldap.responses.result_code"
+ ]
+ }
}
},
"optional": "true"
},
"modify_response": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"matched_dn": {
"type": "string"
"type": "string"
},
"result_code": {
- "type": "string"
+ "type": "string",
+ "suricata": {
+ "keywords": [
+ "ldap.responses.result_code"
+ ]
+ }
}
},
"optional": "true"
},
+ "operation": {
+ "type": "string",
+ "suricata": {
+ "keywords": [
+ "ldap.responses.operation"
+ ]
+ }
+ },
"search_result_done": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"matched_dn": {
"type": "string"
"type": "string"
},
"result_code": {
+ "type": "string",
+ "suricata": {
+ "keywords": [
+ "ldap.responses.result_code"
+ ]
+ }
+ }
+ },
+ "optional": "true"
+ },
+ "search_result_entry": {
+ "type": "object",
+ "additionalProperties": false,
+ "properties": {
+ "attributes": {
+ "type": "array",
+ "minItems": 1,
+ "items": {
+ "type": "object",
+ "additionalProperties": false,
+ "properties": {
+ "type": {
+ "type": "string"
+ },
+ "values": {
+ "type": "array",
+ "minItems": 1,
+ "items": {
+ "type": "string"
+ }
+ }
+ }
+ }
+ },
+ "base_object": {
"type": "string"
}
},