Update an Active Directory domain configuration

PUT 
/config/ldaps/:ldapId

Deep-merges the body into the stored configuration (partial updates are fine).

If scan_config.write_acct.auth_strategy_accounts is sent, the stored list is replaced rather than merged. Password fields are re-encrypted when sent. The optional extra object creates, updates or (when svcUser is empty) deletes the macOS domain service account. Accepts JSON or application/x-www-form-urlencoded bodies. Required role: admin or superadmin. The response carries id but not _id, and never includes bind_pass or the scan account passwords. An empty body {} is accepted and returns the unchanged record.

Request

Responses

200

The updated domain configuration.

400

Request validation failed.

401

No token, or the token is invalid or expired. The body is {message}: No auth token provided when no token is sent, otherwise the token check's message (jwt expired, jwt malformed, invalid signature, invalid token, jwt signature is required). Send Authorization: Bearer <token> exactly: the server drops the first seven characters of the header and reads the rest as the token, so a different scheme or an extra space fails. If Authorization is absent, the server reads a token field in the body, then a token query parameter, then x-access-token. Routes that validate query fields reject ?token= with 400 InvalidQuery.

403

The token's role is not allowed for this operation, or the token's scopes exclude the route (Scope not allowed by token).

404

No record has the :id in the path (the id is malformed or unknown). The body is the bare text Invalid <Type> ID (for example Invalid Computer ID, Invalid User ID) with Content-Type text/html; charset=utf-8, not JSON. Some routes return an empty body.

422

Invalid default_system_config.policies.offline_access_management: enabled must be sent as a boolean when that object is sent, and strategy must be os-best-practice, managed-built-in or custom.