main/resources/RadiusServerService.xml

5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen<?xml version="1.0" encoding="ISO-8859-1"?>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen<!--
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen   DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    Copyright (c) 2007 Sun Microsystems Inc. All Rights Reserved
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    The contents of this file are subject to the terms
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    of the Common Development and Distribution License
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    (the License). You may not use this file except in
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    compliance with the License.
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    You can obtain a copy of the License at
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    https://opensso.dev.java.net/public/CDDLv1.0.html or
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    opensso/legal/CDDLv1.0.txt
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    See the License for the specific language governing
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    permission and limitations under the License.
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    When distributing Covered Code, include this CDDL
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    Header Notice in each file and include the License file
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    at opensso/legal/CDDLv1.0.txt.
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    If applicable, add the following below the CDDL Header,
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    with the fields enclosed by brackets [] replaced by
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    your own identifying information:
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    "Portions Copyrighted [year] [name of copyright owner]"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    $Id: amAuthRadius.xml,v 1.2 2008/06/25 05:45:41 qcheng Exp $
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen-->
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen<!--
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    Portions Copyrighted 2011 ForgeRock AS
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen-->
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen<!DOCTYPE ServicesConfiguration
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen        PUBLIC "=//iPlanet//Service Management Services (SMS) 1.0 DTD//EN"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen        "jar://com/sun/identity/sm/sms.dtd">
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen<ServicesConfiguration>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    <Service name="RadiusServerService" version="1.0">
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen        <Schema
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                serviceHierarchy="/DSAMEConfig/RadiusServerService"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                i18nFileName="radiusServer"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                revisionNumber="1"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                i18nKey="radius-server-service-description">
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen            <Global validate="yes" >
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                <AttributeSchema name="radiusListenerEnabled"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 type="single_choice"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 syntax="string"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 i18nKey="a-radius-listener-enabled-label">
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <ChoiceValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <ChoiceValue i18nKey="choiceYES">YES</ChoiceValue>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <ChoiceValue i18nKey="choiceNO">NO</ChoiceValue>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </ChoiceValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <Value>NO</Value>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                </AttributeSchema>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                <AttributeSchema name="radiusServerPort"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 cosQualifier="default"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 i18nKey="b-radius-port"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 isSearchable="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 syntax="number_range"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 rangeStart="1025"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 rangeEnd="65535"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 type="single" >
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <Value>1812</Value>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                </AttributeSchema>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                <AttributeSchema name="radiusThreadPoolCoreSize"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 cosQualifier="default"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 i18nKey="c-radius-thread-pool-core-size"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 isSearchable="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 syntax="number_range"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 rangeStart="1"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 rangeEnd="100"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 type="single" >
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <Value>1</Value>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                </AttributeSchema>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                <AttributeSchema name="radiusThreadPoolMaxSize"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 cosQualifier="default"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 i18nKey="d-radius-thread-pool-max-size"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 isSearchable="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 syntax="number_range"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 rangeStart="1"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 rangeEnd="100"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 type="single" >
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <Value>10</Value>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                </AttributeSchema>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                <AttributeSchema name="radiusThreadPoolKeepaliveSeconds"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 cosQualifier="default"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 i18nKey="e-radius-thread-pool-keepalive-seconds"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 isSearchable="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 syntax="number_range"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 rangeStart="1"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 rangeEnd="3600"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 type="single" >
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <Value>10</Value>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                </AttributeSchema>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                <AttributeSchema name="radiusThreadPoolQueueSize"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 cosQualifier="default"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 i18nKey="f-radius-thread-pool-queue-size"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 isSearchable="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 syntax="number_range"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 rangeStart="1"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 rangeEnd="1000"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                 type="single" >
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <DefaultValues>
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen                        <Value>20</Value>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                </AttributeSchema>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                <SubSchema name="radiusClient"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                           inheritance="multiple"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                           maintainPriority="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                           supportsApplicableOrganization="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                           i18nFileName="radiusServer"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                           i18nKey="client-config-instance">
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <AttributeSchema name="clientIpAddress"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     i18nKey="a-client-ip-address-label"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     isSearchable="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     syntax="string"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     type="single" >
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen                         <DefaultValues>
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen                            <Value>/127.0.0.1</Value>
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen                        </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </AttributeSchema>
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <AttributeSchema name="clientSecret"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     i18nKey="b-client-secret-label"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     isSearchable="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     syntax="string"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     type="single" >
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                            <DefaultValuesClassName
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                className="org.forgerock.openam.radius.server.config.DefaultClientSecretGenerator">
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                            </DefaultValuesClassName>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </AttributeSchema>
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <AttributeSchema name="clientPacketsLogged"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     type="single_choice"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     syntax="string"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     i18nKey="c-client-log-packets">
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <ChoiceValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                            <ChoiceValue i18nKey="choiceYES">YES</ChoiceValue>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                            <ChoiceValue i18nKey="choiceNO">NO</ChoiceValue>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        </ChoiceValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                            <Value>NO</Value>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </AttributeSchema>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <AttributeSchema name="handlerClass"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     i18nKey="d-handler-class"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     isSearchable="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     syntax="string"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     type="single" >
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        <DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                            <Value>org.forgerock.openam.radius.server.spi.handlers.OpenAMAuthHandler</Value>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                        </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </AttributeSchema>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    <AttributeSchema name="handlerConfig"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     i18nKey="e-handler-config-params"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     isSearchable="no"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     syntax="string"
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                                     type="list" >
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen                        <DefaultValues>
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen                            <Value>realm=/</Value>
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen                            <Value>chain=ldapService</Value>
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen                        </DefaultValues>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                    </AttributeSchema>
ce4f078454094a0ae57c65d5f1dae005f280687ajamiebowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen                </SubSchema>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen            </Global>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen            <!--
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen             Having an Organization declaration is required before openAM will allows us to save an instance of the
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen             global SubSchema. Otherwise, it gives an error upon saving saying, "The service RadiusClientService does
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen             not have organization schema." By adding an empty Organization no configuration is added to the Services
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen             tab for this service in realms but we can persist intances of radiusClient.
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen            -->
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen            <Organization>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen            </Organization>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen        </Schema>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen    </Service>
5c124de5c36bfc236d55578429df5f048f0d0a07Jamie Bowen</ServicesConfiguration>