{
    "bmc.kepler.AccountService.Authentication": {
        "properties": {
            "AccountLockoutDuration": {
                "baseType": "S32",
                "readOnly": false,
                "default": 300,
                "minimum": 60,
                "maximum": 86400,
                "options": {
                    "emitsChangedSignal": "true"
                },
                "description": "账户登录失败后锁定时长,单位为秒"
            },
            "MaxAccountLockoutDuration": {
                "baseType": "S32",
                "readOnly": false,
                "default": 1800,
                "minimum": 1800,
                "maximum": 86400,
                "options": {
                    "emitsChangedSignal": "false"
                },
                "description": "账户锁定时长的最大范围,单位为秒"
            },
            "AccountLockoutThreshold": {
                "baseType": "S32",
                "readOnly": false,
                "default": 5,
                "minimum": 0,
                "maximum": 255,
                "options": {
                    "emitsChangedSignal": "true"
                },
                "description": "账户登录失败该次数后被锁定"
            },
            "MaxAccountLockoutThreshold": {
                "baseType": "S32",
                "readOnly": false,
                "default": 6,
                "minimum": 6,
                "maximum": 255,
                "options": {
                    "emitsChangedSignal": "false"
                },
                "description": "账户锁定次数的最大范围"
            },
            "AccountLockoutCounterResetAfter": {
                "baseType": "S32",
                "readOnly": false,
                "default": 300,
                "minimum": 0,
                "maximum": 1800,
                "options": {
                    "emitsChangedSignal": "false"
                },
                "description": "账户上次登录失败与重置锁定阈值计数间的时间间隔,单位为秒"
            },
            "LocalAccountAuth": {
                "baseType": "String",
                "readOnly": false,
                "default": "LocalFirst",
                "enum": [
                    "Disabled",
                    "Enabled",
                    "Fallback",
                    "LocalFirst"
                ],
                "options": {
                    "emitsChangedSignal": "false"
                },
                "description": "指示如何使用账户服务中的账户集合作为身份验证的一部分,Disable:关闭当前账户集合验证功能;Enabled:开启当前账户集合验证功能;Fallback:当前账户集合验证失败后使用其他可用账户集合验证;LocalFirst:优先使用本地账户集合验证"
            }
        },
        "methods": {
            "Authenticate": {
                "initiator": true,
                "req": {
                    "UserName": {
                        "baseType": "String",
                        "maxLength": 32,
                        "minLength": 1,
                        "description": "用户名"
                    },
                    "Password": {
                        "baseType": "U8[]",
                        "description": "密码"
                    },
                    "Domain": {
                        "baseType": "String",
                        "description": "标识登录域名"
                    }
                },
                "rsp": {
                    "UserId": {
                        "baseType": "S32"
                    },
                    "Privileges": {
                        "baseType": "String[]"
                    },
                    "RoleId": {
                        "baseType": "U8"
                    },
                    "ExtraData": {
                        "baseType": "Dictionary",
                        "$ref": "#/defs/ExtraDataDict"
                    }
                },
                "description": "认证接口"
            }
        }
    },
    "defs": {
        "AuthType": {
            "Local": 0,
            "ldap_auto_match": 1,
            "ldap_server1": 2,
            "ldap_server2": 3,
            "ldap_server3": 4,
            "ldap_server4": 5,
            "ldap_server5": 6,
            "ldap_server6": 7,
            "ldap_kerberos_sso": 12,
            "kerberos_server": 13,
            "sso_local": 14,
            "sso_ldap": 15,
            "auto_match": 255
        },
        "RmcpAuthAlgo": {
            "None": 0,
            "HmacSha1": 1,
            "HmacMd5": 2,
            "HmacSha2": 3
        },
        "SessionLogoutType": {
            "SessionLogout": 0,
            "SessionTimeout": 1,
            "SessionKickout": 2,
            "SessionRelogin": 3,
            "AccountConfigChange": 4,
            "BMCConfigChange": 5
        },
        "ExtraDataDict": {
            "key": {
                "baseType": "String"
            },
            "value": {
                "baseType": "String"
            }
        }
    }
}