will be added to the policies set in token_policies. :type token_no_default_policy: bool :param token_num_uses: The maximum number of times a generated token may be used (within its lifetime); 0 means unlimited. :type token_num_uses: int :param token_period: The maximum allowed period value when a periodic token is requested from this role. :type token_period: str | unicode :param token_policies: List of token policies to encode onto generated tokens. :type token_policies: list :param token_type: The type of token that should be generated. :type token_type: str | unicode :param userfilter: An optional LDAP user search filter. :type userfilter: str | unicode :param username_as_alias: If set to true, forces the auth method to use the username passed by the user as the alias name. :type username_as_alias: bool :param userdn: Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com :type userdn: str | unicode :param user_dn: Alias for userdn. This alias will be removed in v3.0.0. :type user_dn: str | unicode :param groupdn: LDAP search base to use for group membership search. This can be the root containing either groups or users. Example: ou=Groups,dc=example,dc=com :type groupdn: str | unicode :param group_dn: Alias for groupdn. This alias will be removed in v3.0.0. :type group_dn: str | unicode :param url: The LDAP server to connect to. Examples: ldap://ldap.myorg.com, ldaps://ldap.myorg.com:636. Multiple URLs can be specified with commas, e.g. ldap://ldap.myorg.com,ldap://ldap2.myorg.com; these will be tried in-order. :type url: str | unicode :param case_sensitive_names: If set, user and group names assigned to policies within the backend will be case sensitive. Otherwise, names will be normalized to lower case. Case will still be preserved when sending the username to the LDAP server at login time; this is only for matching local user/group definitions. :type case_sensitive_names: bool :param starttls: If true, issues a StartTLS command after establishing an unencrypted connection. :type starttls: bool :param tls_min_version: Minimum TLS version to use. Accepted values are tls10, tls11 or tls12. :type tls_min_version: str | unicode :param tls_max_version: Maximum TLS version to use. Accepted values are tls10, tls11 or tls12. :type tls_max_version: str | unicode :param insecure_tls: If true, skips LDAP server SSL certificate verification - insecure, use with caution! :type insecure_tls: bool :param certificate: CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded. :type certificate: str | unicode :param binddn: Distinguished name of object to bind when performing user search. Example: cn=vault,ou=Users,dc=example,dc=com :type binddn: str | unicode :param bind_dn: Alias for binddn. This alias will be removed in v3.0.0. :type bind_dn: str | unicode :param bindpass: Password to use along with binddn when performing user search. :type bindpass: str | unicode :param bind_pass: Alias for bindpass. This alias will be removed in v3.0.0. :type bind_pass: str | unicode :param userattr: Attribute on user attribute object matching the username passed when authenticating. Examples: sAMAccountName, cn, uid :type userattr: str | unicode :param user_attr: Alias for userattr. This alias will be removed in v3.0.0. :type user_attr: str | unicode :param discoverdn: Use anonymous bind to discover the bind DN of a user. :type discoverdn: bool :param discover_dn: Alias for discoverdn. This alias will be removed in v3.0.0. :type discover_dn: bool :param deny_null_bind: This option prevents users from bypassing authentication when providing an empty password. :type deny_null_bind: bool :param upndomain: The userPrincipalDomain used to construct the UPN string for the authenticating user. The constructed UPN will appear as [username]@UPNDomain. Example: example.com, which will cause vault to bind as username@example.com. :type upndomain: str | unicode :param upn_domain: Alias for upndomain. This alias will be removed in v3.0.0. :type upn_domain: str | unicode :param groupfilter: Go template used when constructing the group membership query. The template can access the following context variables: [UserDN, Username]. The default is `(|(memberUid={{.Username}})(member={{.UserDN}})(uniqueMember={{.UserDN}}))`, which is compatible with several common directory schemas. To support nested group resolution for Active Directory, instead use the following query: (&(objectClass=group)(member:1.2.840.113556.1.4.1941:={{.UserDN}})). :type groupfilter: str | unicode :param group_filter: Alias for groupfilter. This alias will be removed in v3.0.0. :type group_filter: str | unicode :param groupattr: LDAP attribute to follow on objects returned by groupfilter in order to enumerate user group membership. Examples: for groupfilter queries returning group objects, use: cn. For queries returning user objects, use: memberOf. The default is cn. :type groupattr: str | unicode :param group_attr: Alias for groupattr. This alias will be removed in v3.0.0. :type group_attr: str | unicode :param use_token_groups: If true, groups are resolved through Active Directory tokens. This may speed up nested group membership resolution in large directories. :type use_token_groups: bool :param token_ttl: The incremental lifetime for generated tokens. :type token_ttl: str | unicode :param token_max_ttl: The maximum lifetime for generated tokens. :type token_max_ttl: str | unicode :param mount_point: The "path" the method/backend was mounted on. :type mount_point: str | unicode :return: The response of the configure request. :rtype: requests.Response Ú