0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# Copyright (c) 2006 Sun Microsystems Inc. All Rights Reserved
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# The contents of this file are subject to the terms
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# of the Common Development and Distribution License
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# (the License). You may not use this file except in
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# compliance with the License.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# You can obtain a copy of the License at
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# https://opensso.dev.java.net/public/CDDLv1.0.html or
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# See the License for the specific language governing
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# permission and limitations under the License.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# When distributing Covered Code, include this CDDL
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# Header Notice in each file and include the License file
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# If applicable, add the following below the CDDL Header,
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# with the fields enclosed by brackets [] replaced by
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# your own identifying information:
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# "Portions Copyrighted [year] [name of copyright owner]"
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# $Id: AMClient.properties,v 1.24 2009/08/12 17:43:03 beomsuk Exp $
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster# Portions Copyrighted [2010] [ForgeRock AS]
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster/* The following keys are used to configure the Debug service.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Possible values for the key 'level' are: off | error | warning | message.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * The key 'directory' specifies the output directory where the debug files
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * will be created.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Trailing spaces are significant.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Windows: Use forward slashes "/" separate directories, not backslash "\".
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Windows: Spaces in the file name are allowed for Windows.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.services.debug.directory=@DEBUG_DIR@
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Server mode should be 'false'
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Cache enable / disable properties
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Refresh time for appssotoken, value in minutes
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Logging status
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * SDK package name
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.sdk.package=com.iplanet.am.sdk.remote
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Configure remote plugin classes for configuration (SMS)
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.sm.sms_object_class_name=com.sun.identity.sm.jaxrpc.SMSJAXRPCObject
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Naming URL
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Notification URL
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.client.notification.url=@NOTIFICATION_URL@
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Security Credentails to read the configuration data
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.agents.app.username=@APPLICATION_USER@
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.service.password=@APPLICATION_PASSWD@
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.service.secret=@ENCODED_APPLICATION_PASSWORD@
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Encryption key that will be used to encrypt and decypt
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * data to communicate with the server.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * This key is needed to decrypt passwords stored
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * in the SMS configuration.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Encryption key that will be used to encrypt and decypt
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * data used locally within the client.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.client.encryptionKey=@ENCRYPTION_KEY_LOCAL@
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Encryption: The key "com.iplanet.security.encryptor" specifies
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * the encrypting class implementation.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Available classes are:
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.security.encryptor=com.iplanet.services.util.JCEEncryption
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Property to enable/disable the notifications for am.sdk and IdRepo Caches.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * If set to "true" notifications are enabled and disabled if set to "false".
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.idm.remote.notification.enabled=false
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Property to enable/disable the notifications for service management caches.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * If set to "true" notifications are enabled and disabled if set to "false".
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Cache update time (in minutes) for am.sdk & IdRepo Caches
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * if notification URL is not provided or if notifications are disabled.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * 1. This property is applicable only if
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * is not provided or if 'com.sun.identity.idm.remote.notification.enabled'
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * is set to 'false'.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * 2. If the polling time is set as 0, then polling is disabled.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Cache update time (in minutes) for service configutation data,
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * if notification URL is not provided or if notifications are disabled.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * 1. This property is applicable only if
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * is not provided or if 'com.sun.identity.sm.notification.enabled' is
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * set to 'false'.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * 2. If the cache time is set as 0, then no cache updates will occur.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* The following are the properties to configure service management Cache for
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* TTL. If the property 'com.sun.identity.sm.cache.ttl.enable' is set to
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* true, the cache entries will expire based on the time specified in the
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* property "com.sun.identity.sm.cache.ttl" (in minutes).
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* The following are the properties to configure IdRepo cache for TTL.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* If the property 'com.sun.identity.idm.cache.entry.expire.enabled' is set to
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* true, the cache entries will expire based on the time specified in the
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* properties below. The properties 'com.sun.identity.idm.cache.user.expire.time'
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* & 'com.sun.identity.idm.cache.default.expire.time' specify time in minutes
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* for which the user & non-user entries respectively remain valid after their
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* last modification. In other words after this specified period of time
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* elapses (after the last modification/read from the directory), the data
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* for the entry that is cached will expire. At that instant new requests for
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* data for these entries will result in reading it from the IdRepo plugins.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.idm.cache.entry.expire.enabled=true
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.idm.cache.entry.user.expire.time=1
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.idm.cache.entry.default.expire.time=1
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* The following are the properties to configure AMSDK plugin Cache for TTL.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* If the property 'com.iplanet.am.sdk.cache.entry.expire.enabled' is set to
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* true, the cache entries will expire based on the time specified in the
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* properties below. The properties 'com.iplanet.am.sdk.cache.user.expire.time'
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* & 'com.iplanet.am.sdk.cache.default.expire.time' specify time in minutes for
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* which the user & non-user entries respectively remain valid after their last
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* modification. In other words after this specified period of time elapses
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* (after the last modification/read from the directory), the data for the
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* entry that is cached will expire. At that instant new requests for data for
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* these entries will result in reading it from the Directory.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.sdk.cache.entry.expire.enabled=true
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.sdk.cache.entry.user.expire.time=1
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.sdk.cache.entry.default.expire.time=1
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Server protocol, host and port to be used by Client Services
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.server.protocol=@SERVER_PROTOCOL@
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.services.deploymentDescriptor=@DEPLOY_URI@
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.console.protocol=@CONSOLE_PROTOCOL@
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.console.deploymentDescriptor=@CONSOLE_DEPLOY_URI@
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Session related properties.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.session.client.polling.enable=true
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.session.client.polling.period=180
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Identify cert db directory path, prefix and password file
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * to initialize JSS Socket Factory when Web Container is configured SSL
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.admin.cli.certdb.dir=@CONTAINER_CERTDB_DIR@
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.admin.cli.certdb.prefix=@CONTAINER_CERTDB_PREFIX@
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.admin.cli.certdb.passfile=@BASEDIR@/@PRODUCT_DIR@/config/.wtpass
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Identify property value for SSL ApprovalCallback / HostnameVerifier
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * If com.iplanet.services.comm is configured as protocol handler
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * and the checkSubjectAltName or resolveIPAddress feature is enabled,
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * cert8.db and key3.db with the prefix value of
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * com.iplanet.am.admin.cli.certdb.prefix will have to be created under
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * the directory of com.iplanet.am.admin.cli.certdb.dir before server is
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * restarted.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.jssproxy.trustAllServerCerts=false
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.iplanet.am.jssproxy.checkSubjectAltName=false
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster/**************************************************************
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Policy Client parameters
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster **************************************************************/
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster/* Policy decision log parameters. Possible values for logging.level
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * are NONE, ALLOW, DENY, BOTH, and DECISION */
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.agents.server.log.file.name=amRemotePolicyLog
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster/* Notification URL for updating cache */
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.agents.notification.enabled=false
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.agents.notification.url=@NOTIFICATION_URL@
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster/* Cache time in minutes */
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster/* Information to cache. Possible value are "subtree" or "self" */
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.policy.client.cacheMode=subtree
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster/* Policy client clock skew value in seconds */
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* Explicitly disable monitoring services in the client applications.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster* Specify if allow to use cached data for HttpURLConnection
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Property to enable or disable to use the metro implementation
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * for ws-trust client.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.wss.trustclient.enablemetro=false
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Property to use the SOAP version for ws-trust client. The containers
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * that do not support JavaEE5 should use the version 1.1 but make sure that
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * the STS service is compatible with 1.1 version.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * This property defines interval in seconds for web services security
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * cache timeout.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.wss.security.cache.timeout.interval=300
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * This property defines an interval in seconds for cleaning up the
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * web services security cache.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.wss.security.cache.cleanup.interval=60
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * This property indicates a plugin class for WSSCacheRepository that can be
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * used for storing web services security cache persistently.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.wss.security.cacherepository.plugin=
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * This property is used by the standone SAML Tokens in web services security
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * for the issuer name. If this property is not set, they will use the server
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * host name as the default.
0a99555401a033704f1f171baab6db11fb5528f2Allan Fostercom.sun.identity.wss.security.samlassertion.issuer=
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * This property is used to define the time skew in milli seconds used when
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * the time stamps are validated.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Policy ResourceComparators to be used for different service names
0a99555401a033704f1f171baab6db11fb5528f2Allan FosterserviceType=iPlanetAMWebAgentService|class=com.sun.identity.policy.plugins.HttpURLResourceName|wildcard=*|delimiter=/|caseSensitive=false|oneLevelWildCard=-*-
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Protocol handler pkg name for HTTPS protocol.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Default value is none.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * Available impl classes are:
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * When the Site monitoring needs to be disabled, set this property to true
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * When a client SDK application runs in the same container as the OpenAM server
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster * this property might be set to true