allowEmptyPasswords - whether empty passwords are allowed

java.naming.factory.initial - optional. default is com.sun.jndi.ldap.LdapCtxFactory
java.naming.provider.url - The value of the property should contain a URL string (e.g. "ldap://somehost:389"). default is "ldap://localhost:389" if the security protocol is absent and ldap://localhost:636 if it is "ssl".
java.naming.security.authentication - optional. holds the name of the environment property for specifying the security level to use. Its value is one of the following strings: "none", "simple", "strong". default is "simple"
java.naming.security.protocol - optional. The type of protocol (e.g., "ssl")
java.naming.factory.object - optional.  The value of the property should be a colon-separated list of the fully qualified class names of factory classes that will create an object given information about the object.
java.naming.factory.state - optional. The value of the property should be a colon-separated list of the fully qualified class names of state factory classes that will be used to get an object's state given the object itself.
java.naming.factory.url.pkgs - optional. The value of the property should be a colon-separated list of package prefixes for the class name of the factory class that will create a URL context factory
java.naming.dns.url - optional. holds the name of the environment property for specifying the DNS host and domain names to use for the JNDI URL context (for example, "dns://somehost/wiz.com")
java.naming.authoritative - optional. holds the name of the environment property for specifying the authoritativeness of the service requested. If the value of the property is the string "true", it means that the access is to the most authoritative source (i.e. bypass any cache or replicas). If the value is anything else, the source need not be (but may be) authoritative. If unspecified, the value defaults to "false".
java.naming.batchsize - optional. holds the name of the environment property for specifying the batch size to use when returning data via the service's protocol. This is a hint to the provider to return the results of operations in batches of the specified size, so the provider can optimize its performance and usage of resources. The value of the property is the string representation of an integer. If unspecified, the batch size is determined by the service provider.
java.naming.referral - optional. holds the name of the environment property for specifying how referrals encountered by the service provider are to be processed. The value of the property is one of the following strings: "follow"   follow referrals automatically, "ignore"   ignore referrals, "throw"  throw ReferralException when a referral is encountered. If this property is not specified, the default is determined by the provider.


principalDNPrefix - the dn prefix to add to the user name
principalDNSuffix - the dn suffix to add to the user name
matchOnUserDN - when searching for roles, match on the domain name of the user (with prefix/suffix), or the user name
userRolesCtxDNAttributeName - the attribute name of the user roles in the ldap server
rolesCtxDN - the context to search the roles in.
uidAttributeID - the attribute name for uid. default is "uid" (this is matched against the username, or user domain name (see matchOnUserDN)
roleAttributeID - the attribute name for the role. default is "roles"
roleAttributeIsDN - whethere the role is in a domain name format.
roleNameAttributeID - if roleAttributeIsDN is true, this is the attribute name of the role. default is "name"

