resources/services/amPolicyConfig.xml

	amPolicyConfig.xml revision af98b867657b187415a4a4fd0002b82c27d0a865
cfbca4e518f4981f435e93e434f17271e6efc138rbowen<?xml version="1.0" encoding="ISO-8859-1"?>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen<!--
cfbca4e518f4981f435e93e434f17271e6efc138rbowen   DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    Copyright (c) 2006 Sun Microsystems Inc. All Rights Reserved
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    The contents of this file are subject to the terms
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    of the Common Development and Distribution License
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    (the License). You may not use this file except in
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    compliance with the License.
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    You can obtain a copy of the License at
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    https://opensso.dev.java.net/public/CDDLv1.0.html or
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    opensso/legal/CDDLv1.0.txt
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    See the License for the specific language governing
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    permission and limitations under the License.
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    When distributing Covered Code, include this CDDL
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    Header Notice in each file and include the License file
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    at opensso/legal/CDDLv1.0.txt.
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    If applicable, add the following below the CDDL Header,
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    with the fields enclosed by brackets [] replaced by
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    your own identifying information:
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    "Portions Copyrighted [year] [name of copyright owner]"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    $Id: amPolicyConfig.xml,v 1.9 2009/05/05 18:53:03 mrudul_uchil Exp $
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen-->
cfbca4e518f4981f435e93e434f17271e6efc138rbowen<!-- Portions Copyrighted 2014 ForgeRock, AS. -->
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen<!DOCTYPE ServicesConfiguration
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    PUBLIC "=//iPlanet//Service Management Services (SMS) 1.0 DTD//EN"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    "jar://com/sun/identity/sm/sms.dtd">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen<ServicesConfiguration>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen    <Service name="iPlanetAMPolicyConfigService" version="1.0">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        <Schema
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            serviceHierarchy="/DSAMEConfig/iPlanetAMPolicyConfigService"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nFileName="amPolicyConfig"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            revisionNumber="60"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="iplanet-am-policy-config-service-description">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <Global>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="serviceObjectClasses"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    type="list"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    i18nKey="">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>iplanet-am-policy-config-service</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-resource-comparator"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="list"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            validator="ResourceComparatorValidator"
9546947d8f7082fb4b70e1659feb5460502b73e4rbowen            i18nKey="a100">
9546947d8f7082fb4b70e1659feb5460502b73e4rbowen            <DefaultValues>
04bab87733a0e93a926e82311c85cd8ac06a032fnd            <Value>serviceType=iPlanetAMWebAgentService|class=com.sun.identity.policy.plugins.HttpURLResourceName|wildcard=*|oneLevelWildcard=-*-|delimiter=/|caseSensitive=false</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <Value>serviceType=sunIdentityServerDiscoveryService|class=com.sun.identity.policy.plugins.PrefixResourceName|wildcard=*|oneLevelWildcard=-*-|delimiter=;|caseSensitive=false</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-continue-evaluation-on-deny-decision"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="boolean"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    uitype="radio"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="a100a">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <BooleanValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <BooleanTrueValue i18nKey="a100b">true</BooleanTrueValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <BooleanFalseValue i18nKey="a100c">false</BooleanFalseValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            </BooleanValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <Value>false</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="sun-am-policy-config-org-alias-mapped-resources-enabled"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="boolean"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    uitype="radio"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="a100e">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <BooleanValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <BooleanTrueValue i18nKey="a100b">true</BooleanTrueValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <BooleanFalseValue i18nKey="a100c">false</BooleanFalseValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            </BooleanValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <Value>false</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
9546947d8f7082fb4b70e1659feb5460502b73e4rbowen
9546947d8f7082fb4b70e1659feb5460502b73e4rbowen                <AttributeSchema name="sun-am-policy-config-advices-handleable-by-am"
04bab87733a0e93a926e82311c85cd8ac06a032fnd            type="list"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <Value>AuthLevelConditionAdvice</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <Value>AuthSchemeConditionAdvice</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <Value>AuthenticateToRealmConditionAdvice</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <Value>AuthenticateToServiceConditionAdvice</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        <AttributeSchema name="ResourceComparatorValidator"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    type="validator"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string">
9546947d8f7082fb4b70e1659feb5460502b73e4rbowen                    <DefaultValues>
9546947d8f7082fb4b70e1659feb5460502b73e4rbowen            <Value>com.sun.identity.policy.ResourceComparatorValidator</Value>
04bab87733a0e93a926e82311c85cd8ac06a032fnd                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            </Global>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <Organization>
9546947d8f7082fb4b70e1659feb5460502b73e4rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-server"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    type="list"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    i18nKey="a101">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <Value>@UM_DIRECTORY_SERVER@:@UM_DIRECTORY_PORT@</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-base-dn"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
9546947d8f7082fb4b70e1659feb5460502b73e4rbowen            i18nKey="">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>@UM_NORMALIZED_ORGBASE@</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-users-base-dn"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    i18nKey="a1021">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>@UM_NORMALIZED_ORGBASE@</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-is-roles-base-dn"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    i18nKey="a1022">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>@UM_NORMALIZED_ORGBASE@</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-bind-dn"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="a103">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>@UM_DS_DIRMGRDN@</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-bind-password"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="password"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="a104">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-organizations-search-filter"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="xml"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="a105">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>(objectclass=@ORG_OBJECT_CLASS@)</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-organizations-search-scope"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single_choice"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <ChoiceValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a126">SCOPE_BASE</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a127">SCOPE_ONE</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a128">SCOPE_SUB</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </ChoiceValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>SCOPE_SUB</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-groups-search-filter"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="xml"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>(objectclass=groupOfUniqueNames)</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-groups-search-scope"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single_choice"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <ChoiceValues>
9546947d8f7082fb4b70e1659feb5460502b73e4rbowen                        <ChoiceValue i18nKey="a126">SCOPE_BASE</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a127">SCOPE_ONE</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a128">SCOPE_SUB</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </ChoiceValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>SCOPE_SUB</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-users-search-filter"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="xml"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="a109">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
04bab87733a0e93a926e82311c85cd8ac06a032fnd                        <Value>(objectclass=@USER_OBJECT_CLASS@)</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-users-search-scope"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single_choice"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="a110">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <ChoiceValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a126">SCOPE_BASE</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a127">SCOPE_ONE</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a128">SCOPE_SUB</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </ChoiceValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>SCOPE_SUB</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-roles-search-filter"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="xml"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>(&amp;(objectclass=ldapsubentry)(objectclass=nsroledefinition))</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-ldap-roles-search-scope"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            type="single_choice"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            i18nKey="">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <ChoiceValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a126">SCOPE_BASE</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a127">SCOPE_ONE</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a128">SCOPE_SUB</ChoiceValue>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </ChoiceValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen            <DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <Value>SCOPE_SUB</Value>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    </DefaultValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen        </AttributeSchema>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                <AttributeSchema name="iplanet-am-policy-config-is-roles-search-scope"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    type="single_choice"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    syntax="string"
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    i18nKey="a1121">
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                    <ChoiceValues>
cfbca4e518f4981f435e93e434f17271e6efc138rbowen                        <ChoiceValue i18nKey="a126">SCOPE_BASE</ChoiceValue>
                        <ChoiceValue i18nKey="a127">SCOPE_ONE</ChoiceValue>
                        <ChoiceValue i18nKey="a128">SCOPE_SUB</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>SCOPE_SUB</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-ldap-organizations-search-attribute"
            type="single"
                    syntax="string"
            i18nKey="">
            <DefaultValues>
                        <Value>@ORG_NAMING_ATTR@</Value>
                    </DefaultValues>
        </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-ldap-groups-search-attribute"
            type="single"
                    syntax="string"
            i18nKey="">
            <DefaultValues>
                        <Value>cn</Value>
                    </DefaultValues>
        </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-ldap-users-search-attribute"
            type="single"
                    syntax="string"
            i18nKey="a115">
            <DefaultValues>
                        <Value>@USER_NAMING_ATTR@</Value>
                    </DefaultValues>
        </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-ldap-roles-search-attribute"
            type="single"
                    syntax="string"
            i18nKey="">
            <DefaultValues>
                        <Value>cn</Value>
                    </DefaultValues>
        </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-search-limit"
                    type="single"
                    syntax="number"
                    i18nKey="a117">
                    <DefaultValues>
                        <Value>100</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-search-timeout"
                    type="single"
                    syntax="number"
                    i18nKey="a118">
                    <DefaultValues>
                        <Value>5</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-ldap-ssl-enabled"
            type="single"
                    syntax="boolean"
            i18nKey="a119">
            <DefaultValues>
            <Value>@UM_SSL@</Value>
            </DefaultValues>
        </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-connection_pool_min_size"
                    type="single"
                    syntax="number"
                    i18nKey="a120">
                    <DefaultValues>
                        <Value>1</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-connection_pool_max_size"
                    type="single"
                    syntax="number"
                    i18nKey="a121">
                    <DefaultValues>
                        <Value>10</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-selected-subjects"
                    type="multiple_choice"
                    syntax="string"
                    i18nKey="">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="a144">WebServicesClients</ChoiceValue>
                        <ChoiceValue i18nKey="a129">Organization</ChoiceValue>
                        <ChoiceValue i18nKey="a130">IdentityServerRoles</ChoiceValue>
                        <ChoiceValue i18nKey="a131">LDAPGroups</ChoiceValue>
                        <ChoiceValue i18nKey="a132">LDAPRoles</ChoiceValue>
                        <ChoiceValue i18nKey="a133">LDAPUsers</ChoiceValue>
                        <ChoiceValue i18nKey="a143">AuthenticatedUsers</ChoiceValue>
                        <ChoiceValue i18nKey="a145">AMIdentitySubject</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>WebServicesClients</Value>
                        <Value>AuthenticatedUsers</Value>
                        <Value>AMIdentitySubject</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-selected-conditions"
                    type="multiple_choice"
                    syntax="string"
                    i18nKey="">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="a134">AuthLevelCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a134a">LEAuthLevelCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a135">AuthSchemeCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a135a">AuthenticateToRealmCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a135b">AuthenticateToServiceCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a136">IPCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a137">SimpleTimeCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a141">SessionCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a141a">SessionPropertyCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a141fc">LDAPFilterCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a141amc">AMIdentityMembershipCondition</ChoiceValue>
                        <ChoiceValue i18nKey="a151">ResourceEnvIPCondition</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>AuthLevelCondition</Value>
                        <Value>LEAuthLevelCondition</Value>
                        <Value>AuthSchemeCondition</Value>
                        <Value>AuthenticateToRealmCondition</Value>
                        <Value>AuthenticateToServiceCondition</Value>
                        <Value>SimpleTimeCondition</Value>
                        <Value>IPCondition</Value>
                        <Value>SessionCondition</Value>
                        <Value>SessionPropertyCondition</Value>
                        <Value>LDAPFilterCondition</Value>
                        <Value>AMIdentityMembershipCondition</Value>
                        <Value>ResourceEnvIPCondition</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="sun-am-policy-selected-responseproviders"
                    type="multiple_choice"
                    syntax="string"
                    i18nKey="">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="a201">IDRepoResponseProvider</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>IDRepoResponseProvider</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="sun-am-policy-dynamic-response-attributes"
                    type="list"
                    syntax="string"
                    i18nKey="">
                    <DefaultValues>
                        <Value></Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-selected-referrals"
                    type="multiple_choice"
                    syntax="string"
                    i18nKey="">
                    <ChoiceValues>
                        <ChoiceValue i18nKey="a138">PeerOrgReferral</ChoiceValue>
                        <ChoiceValue i18nKey="a139">SubOrgReferral</ChoiceValue>
                    </ChoiceValues>
                    <DefaultValues>
                        <Value>PeerOrgReferral</Value>
                        <Value>SubOrgReferral</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-subjects-result-ttl"
                    type="single"
                    syntax="number"
                    i18nKey="a125">
                    <DefaultValues>
                        <Value>10</Value>
                    </DefaultValues>
                </AttributeSchema>
                <AttributeSchema name="iplanet-am-policy-config-user-alias-enabled"
                    type="single"
                    syntax="boolean"
                    i18nKey="a150">
                    <DefaultValues>
                        <Value>false</Value>
                    </DefaultValues>
                </AttributeSchema>
        </Organization>
    </Schema>
    <Configuration>
        <OrganizationConfiguration name="/">
        <AttributeValuePair>
            <Attribute name="iplanet-am-policy-config-ldap-bind-dn"/>
            <Value>@UM_DS_DIRMGRDN@</Value>
        </AttributeValuePair>
        <AttributeValuePair>
            <Attribute name="iplanet-am-policy-config-ldap-bind-password"/>
            <Value>@UM_DS_DIRMGRPASSWD@</Value>
        </AttributeValuePair>
        </OrganizationConfiguration>
    </Configuration>

    </Service>
</ServicesConfiguration>