Some attributes of Elytron ldap-key-store resource have defined some default value, but description of these attributes in CLI is missing default values. According to XSD following attributes of ldap-key-store have assigned some default value:

• search-recursive has default value true
• search-time-limit has default value 10000
• filter-alias has default value (alias-attribute={0})
• filter-certificate has default value (certificate-attribute={0})
• filter-iterate has default value (alias-attribute=*)
• alias-attribute has default value cn
• certificate-attribute has default value usercertificate
• certificate-type has default value X.509
• certificate-chain-attribute has default value userSMIMECertificate
• certificate-chain-encoding has default value PKCS7
• key-attribute has default value userPKCS12
• key-type has default value PKCS12