6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper<?xml version="1.0" encoding="UTF-8"?>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper<!--
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper Copyright (c) 2008 Sun Microsystems Inc. All Rights Reserved
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper The contents of this file are subject to the terms
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper of the Common Development and Distribution License
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper (the License). You may not use this file except in
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper compliance with the License.
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper You can obtain a copy of the License at
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper https://opensso.dev.java.net/public/CDDLv1.0.html or
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper opensso/legal/CDDLv1.0.txt
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper See the License for the specific language governing
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper permission and limitations under the License.
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper When distributing Covered Code, include this CDDL
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper Header Notice in each file and include the License file
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper at opensso/legal/CDDLv1.0.txt.
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper If applicable, add the following below the CDDL Header,
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper with the fields enclosed by brackets [] replaced by
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper your own identifying information:
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper "Portions Copyrighted [year] [name of copyright owner]"
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper $Id: web.xml,v 1.2 2009/01/25 05:58:30 naghaon Exp $
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper Portions Copyrighted 2014 ForgeRock AS.
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper-->
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper<web-app version="2.4"
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper xmlns="http://java.sun.com/xml/ns/j2ee"
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name> OpenAM J2EE Policy Agent Sample Application</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <description> An application to demonstrate the features of J2EE Policy Agents </description>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <filter>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <filter-name>Agent</filter-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <filter-class> com.sun.identity.agents.filter.AmAgentFilter </filter-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </filter>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <filter-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <filter-name>Agent</filter-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/*</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <dispatcher>REQUEST</dispatcher>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <dispatcher>INCLUDE</dispatcher>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <dispatcher>FORWARD</dispatcher>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <dispatcher>ERROR</dispatcher>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </filter-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name>ProtectedServlet</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>ProtectedServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-class> com.sun.identity.agents.sample.ProtectedServlet </servlet-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name>UnprotectedServlet</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>UnprotectedServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-class> com.sun.identity.agents.sample.UnprotectedServlet </servlet-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name>ProtectedEJBServlet</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>ProtectedEJBServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-class> com.sun.identity.agents.sample.ProtectedEJBServlet </servlet-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name>SecurityAwareServlet</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>SecurityAwareServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-class> com.sun.identity.agents.sample.SecurityAwareServlet </servlet-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-role-ref>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <role-name>MANAGER_ROLE</role-name>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-link>id=manager,ou=group,dc=openam,dc=forgerock,dc=org</role-link>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-role-ref>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-role-ref>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <role-name>EMPLOYEE_ROLE</role-name>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-link>id=employee,ou=group,dc=openam,dc=forgerock,dc=org</role-link>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-role-ref>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name>InvokerServlet</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>InvokerServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-class> com.sun.identity.agents.sample.InvokerServlet </servlet-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <display-name>URLPolicyServlet</display-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>URLPolicyServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-class> com.sun.identity.agents.sample.URLPolicyServlet</servlet-class>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>ProtectedServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/protectedservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>UnprotectedServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/unprotectedservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>ProtectedEJBServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/protectedejbservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>SecurityAwareServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/securityawareservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>InvokerServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/invokerservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <servlet-name>URLPolicyServlet</servlet-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/urlpolicyservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </servlet-mapping>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <session-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <session-timeout>54</session-timeout>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </session-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <welcome-file-list>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <welcome-file>index.html</welcome-file>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </welcome-file-list>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <error-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <error-code>403</error-code>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <location>/authentication/accessdenied.html</location>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </error-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <error-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <error-code>404</error-code>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <location>/public/notfound.html</location>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </error-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-name>Security Aware Servlet</web-resource-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/securityawareservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <auth-constraint>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=manager,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=employee,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </auth-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-name>Protected Servlet</web-resource-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/protectedservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <auth-constraint>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=manager,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </auth-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-name>Invoker Servlet</web-resource-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/invokerservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <auth-constraint>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=manager,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </auth-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <web-resource-name>Protected EJB Servlet</web-resource-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <url-pattern>/protectedejbservlet</url-pattern>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </web-resource-collection>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <auth-constraint>
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=employee,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </auth-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-constraint>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <login-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <auth-method>FORM</auth-method>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <form-login-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <form-login-page>/authentication/login.html</form-login-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <form-error-page>/authentication/accessdenied.html</form-error-page>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </form-login-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </login-config>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-role id="SR_MANAGER_ROLE">
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=manager,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-role>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper <security-role id="SR_EMPLOYEE_ROLE">
0595fb660c93faf1fdbaad7e1300eb342b5baf31Mark de Reeper <role-name>id=employee,ou=group,dc=openam,dc=forgerock,dc=org</role-name>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper </security-role>
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper
6406210b71fd4a97800f32f3613eea9b6a6a12ceMark de Reeper</web-app>