OpenSSOAgentBootstrap.template revision 20d6346411620e69843780ad0526325cd7ad94ee
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
4bc1bbf45f30ff3ca38c2ad006836e490972c7ccvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Copyright (c) 2008 Sun Microsystems Inc. All Rights Reserved
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# The contents of this file are subject to the terms
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# of the Common Development and Distribution License
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# (the License). You may not use this file except in
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# compliance with the License.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# You can obtain a copy of the License at
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# https://opensso.dev.java.net/public/CDDLv1.0.html or
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# opensso/legal/CDDLv1.0.txt
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# See the License for the specific language governing
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# permission and limitations under the License.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# When distributing Covered Code, include this CDDL
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Header Notice in each file and include the License file
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# at opensso/legal/CDDLv1.0.txt.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# If applicable, add the following below the CDDL Header,
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# with the fields enclosed by brackets [] replaced by
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# your own identifying information:
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# "Portions Copyrighted [year] [name of copyright owner]"
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# $Id: OpenSSOAgentBootstrap.template,v 1.1 2008/11/28 12:26:12 saueree Exp $
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Portions Copyrighted 2010-2014 ForgeRock AS.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#------------------------------------------------------------------------------
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# J2EE Agents Bootstrap File
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
4bc1bbf45f30ff3ca38c2ad006836e490972c7ccvboxsync# OpenAM Policy Agent for:
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Tomcat 6.0.x
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
4bc1bbf45f30ff3ca38c2ad006836e490972c7ccvboxsync# Version: ${project.version}
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#------------------------------------------------------------------------------
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
2c691730ab202620fe427110841aa4e0075b7ccavboxsync# THIS FILE PROVIDES THE CONFIGURATION SETTINGS NECESSARY FOR THE AGENT
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# TO FUNCTION CORRECTLY. PLEASE REFER TO THE DOCUMENTATION BEFORE
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# MODIFYING ANY OF THE VALUES IN THIS FILE.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
79dc091db288c096b6e03888a095477ded84f503vboxsync# Note:
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Data present in this file provides the necessary configuration
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# settings needed by Agent to work correctly. Invalid configuration
2c691730ab202620fe427110841aa4e0075b7ccavboxsync# data present in this file can lead to malfunction of the Agent, the
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# application, and the Application Server.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# WARNING: The contents of this file are classified as an UNSTABLE
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# interface by Sun Microsystems, Inc. As such, they are subject to
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# significant, incompatible changes in any future release of the
d02610fd604cc8ab4cccf7e3fa510c06cb728ff2vboxsync# software.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# INVALID CONFIGURATION SETTINGS MAY RESULT IN MALFUNCTION OF THE ENTIRE
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# SYSTEM.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#------------------------------------------------------------------------------
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# NAMING SERVICE URL
4bc1bbf45f30ff3ca38c2ad006836e490972c7ccvboxsync# Specifies the naming service url(s) that can be used by the system
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# for naming lookups. One or more urls can be specified for this
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# property as a string of urls separated by single space characters.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Hot-Swap Enabled: No
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsynccom.iplanet.am.naming.url=@AM_SERVICES_PROTO@://@AM_SERVICES_HOST@:@AM_SERVICES_PORT@@AM_SERVICES_DEPLOY_URI@/namingservice
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# SERVICE RESOLVER
032e4e2dc19dfc5f755fca9ec053bf2c38de54d6vboxsync# Specifies the service resolver used by this Agent.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Hot-Swap Enabled: No
f2ca52afeb0baed982c05e9d8591e0e4c7539dbdvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsynccom.sun.identity.agents.config.service.resolver = com.sun.identity.agents.tomcat.v6.AmTomcatAgentServiceResolver
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# AGENT USERNAME AND PASSWORD PROPERTIES
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# These are the credentials used by the Agent to identify and
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# authenticate itself before requesting any services that require the
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Agent to be authenticated. If plain text password should not be
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# used, then supply the encrypted password and encryption key.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Hot-Swap Enabled: No
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsynccom.sun.identity.agents.app.username = @AGENT_PROFILE_NAME@
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsynccom.iplanet.am.service.secret = @AGENT_ENCRYPTED_PASSWORD@
3baadeafd9922582dad9b32431362e6296417dd8vboxsync
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# The key that will be used to encrypt and decrypt passwords
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Hot-Swap Enabled: No
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsyncam.encryption.pwd = @AGENT_ENCRYPT_KEY@
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# DEBUG SERVICE PROPERTIES
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# - com.iplanet.services.debug.directory: Specifies the complete path to the
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# directory where debug files will be stored by the Agent.
f2ca52afeb0baed982c05e9d8591e0e4c7539dbdvboxsync# - com.sun.services.debug.mergeall: consolidates all the debug information
49c9958a74e4a297fb7ec141ee764e872430f4bavboxsync# into one file if it is set to on. Each component has its own debug file
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# if it is set to off.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Hot-Swap Enabled: No
62f795a8cb052ea10678f54272612bb087bab1a1vboxsync#
4bc1bbf45f30ff3ca38c2ad006836e490972c7ccvboxsynccom.iplanet.services.debug.level=error
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsynccom.iplanet.services.debug.directory=@DEBUG_LOGS_DIR@
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsynccom.sun.services.debug.mergeall=on
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync
0bd6dc6980372bcbc72756dfd401df65640b13a7vboxsync#
4bc1bbf45f30ff3ca38c2ad006836e490972c7ccvboxsync# AUDIT LOG PROPERTY
0bd6dc6980372bcbc72756dfd401df65640b13a7vboxsync# - local.logfile: Specifies the complete path to the local audit log file
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# to be used by the Agent.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Hot-Swap Enabled: No
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
4bc1bbf45f30ff3ca38c2ad006836e490972c7ccvboxsynccom.sun.identity.agents.config.local.logfile = @AUDIT_LOGS_DIR@/@AUDIT_LOG_FILENAME@
c215a948010614887014a258c1751602d8bf7781vboxsync
4bc1bbf45f30ff3ca38c2ad006836e490972c7ccvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# ORGANIZATION NAME
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Specifies the organization or realm name to be used for authenticating
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# the Agent during runtime. The default value "/" identifies the root
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# organization or realm.
7c205843b5f25329b7bac4cb41e4c55a21c7aafevboxsync# Hot-Swap Enabled: No
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsynccom.sun.identity.agents.config.organization.name = /
4bc1bbf45f30ff3ca38c2ad006836e490972c7ccvboxsync
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# LOCK OF AGENT CONFIGURATION
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# When it's set to true, agent config in run-time is locked.
faa254427e497bb7ee255b22581f40112025e92bvboxsync# Agent has to be restarted to let agent config change take effective
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# whether the changed config parameter is Hot-Swap or not.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# When it's set to false, change of Hot-Swap agent config parameter can be
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# updated into run-time.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Hot-Swap Enabled: No
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsynccom.sun.identity.agents.config.lock.enable = false
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# AGENT PROFILE NAME
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# The profile name used by the Agent to fetch the agent configuration data.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# The value of this property is the same as that of com.sun.identity.agents.app.username
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# in most cases. However if multiple agent instances need to use the same credentials
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# to authenticate, com.sun.identity.agents.app.username and com.iplanet.am.service.secret
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# need to be set to the authenticating credentials accordingly.
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# Hot-Swap Enabled: No
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsynccom.sun.identity.agents.config.profilename = @AGENT_PROFILE_NAME@
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# OPENAM DEPLOYMENT URI
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync# This property controls the URI under which OpenAM has been deployed. If this
24713061a674af34286ac48ad1433329cdd404f2vboxsync# parameter is not supplied then the default value is /openam.
24713061a674af34286ac48ad1433329cdd404f2vboxsync# Hot-Swap Enabled: No
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync#
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsynccom.iplanet.am.services.deploymentDescriptor=@AM_SERVICES_DEPLOY_URI@
5f9dfb422a6ed57822f9c0cb94fa7df8d24acc9bvboxsync