0N/A<?
xml version="1.0" encoding="UTF-8"?>
0N/A DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER. 0N/A Copyright (c) 2009 Sun Microsystems Inc. All Rights Reserved 0N/A The contents of this file are subject to the terms 0N/A of the Common Development and Distribution License 0N/A (the License). You may not use this file except in 0N/A compliance with the License. 0N/A You can obtain a copy of the License at 0N/A See the License for the specific language governing 0N/A permission and limitations under the License. 1472N/A When distributing Covered Code, include this CDDL 1472N/A Header Notice in each file and include the License file 0N/A If applicable, add the following below the CDDL Header, 0N/A with the fields enclosed by brackets [] replaced by 0N/A your own identifying information: 1879N/A "Portions Copyrighted [year] [name of copyright owner]" 1879N/A Portions copyright 2011-2014 ForgeRock AS. 0N/A<!
DOCTYPE ServicesConfiguration 0N/A PUBLIC "=//iPlanet//Service Management Services (SMS) 1.0 DTD//EN" 0N/A<
ServicesConfiguration>
0N/A <
Service name="sunEntitlementService" version="1.0">
0N/A <
Schema i18nFileName="" revisionNumber="20">
0N/A <
AttributeSchema name="usenewconsole" 1703N/A <
AttributeSchema name="migratedtoentitlementservice" 0N/A <
AttributeSchema name="xacml-privilege-enabled" 0N/A <
Value>false</
Value>
0N/A <
AttributeSchema name="evalThreadSize" 0N/A syntax="number_range" 0N/A rangeStart="0" rangeEnd="200" 0N/A <
AttributeSchema name="searchThreadSize" 0N/A syntax="number_range" 0N/A rangeStart="0" rangeEnd="200" 2771N/A <
AttributeSchema name="policyCacheSize" 3767N/A rangeStart="0" rangeEnd="2147483647" 0N/A <
AttributeSchema name="indexCacheSize" 0N/A syntax="number_range" 0N/A rangeStart="0" rangeEnd="2147483647" 0N/A <
Value>100000</
Value>
0N/A <!-- entitlement notification, Connection timeout in millisec, 0N/A <
AttributeSchema name="entitlement-notifier-conn-timeout" 0N/A syntax="number_range" 0N/A rangeStart="0" rangeEnd="300000" 0N/A <
AttributeSchema name="entitlement-notifier-retries" 0N/A syntax="number_range" 0N/A rangeStart="0" rangeEnd="50" 0N/A <!-- duration between retries in millisec, max 5 mins --> 0N/A <
AttributeSchema name="entitlement-notifier-duration-between-retries" 4018N/A rangeStart="0" rangeEnd="300000" 0N/A <!-- Privilege change notification 0N/A Connection timeout in millisec, max 5 mins --> 0N/A <
AttributeSchema name="privilege-notifier-conn-timeout" 0N/A syntax="number_range" 0N/A rangeStart="0" rangeEnd="300000" 0N/A <
AttributeSchema name="privilege-notifier-retries" 0N/A syntax="number_range" 0N/A rangeStart="0" rangeEnd="50" 0N/A <!-- duration between retries in millisec, max 5 mins --> 0N/A <
AttributeSchema name="privilege-notifier-duration-between-retries" 0N/A syntax="number_range" 0N/A rangeStart="0" rangeEnd="300000" 0N/A <
AttributeSchema name="privilege-notifier-threadpool-size" 0N/A syntax="number_range" 0N/A rangeStart="0" rangeEnd="20" 0N/A <
AttributeSchema name="network-monitor-enabled" 0N/A <
Value>false</
Value>
0N/A <
AttributeSchema name="listeners" 1703N/A <
SubSchema name="applicationTypes" inheritance="multiple">
1703N/A <
SubSchema name="applicationType" inheritance="multiple">
4018N/A <
AttributeSchema name="applicationClassName" 0N/A <
AttributeSchema name="actions" 0N/A <
AttributeSchema name="searchIndexImpl" 0N/A <
AttributeSchema name="saveIndexImpl" 0N/A <
AttributeSchema name="resourceComparator" 0N/A <
AttributeSchema name="nonBooleanActionValues" 0N/A <
SubSchema name="applications" inheritance="multiple">
0N/A <
SubSchema name="application" inheritance="multiple">
0N/A <
AttributeSchema name="applicationType" 3767N/A <
AttributeSchema name="description" 0N/A <
AttributeSchema name="actions" 710N/A <
AttributeSchema name="resources" 0N/A <
AttributeSchema name="subjects" 710N/A <
AttributeSchema name="conditions" 1879N/A <
AttributeSchema name="entitlementCombiner" <
AttributeSchema name="searchIndexImpl" <
AttributeSchema name="saveIndexImpl" <
AttributeSchema name="resourceComparator" <
AttributeSchema name="subjectAttributeNames" <
AttributeSchema name="meta" <
SubSchema name="subjectAttributesCollectors" inheritance="multiple">
<
SubSchema name="OpenSSOSubjectAttributesCollector" inheritance="multiple">
<
AttributeSchema name="class" <
AttributeSchema name="groupMembershipSearchIndexEnabled" <
SubConfiguration name="applicationTypes" id="applicationTypes">
<
SubConfiguration name="iPlanetAMWebAgentService" <
Attribute name="actions" />
<
Value>DELETE=true</
Value>
<
Value>OPTIONS=true</
Value>
<
Value>PATCH=true</
Value>
<
Attribute name="searchIndexImpl" />
<
Attribute name="saveIndexImpl" />
<
Attribute name="resourceComparator" />
<
SubConfiguration name="crestPolicyService" id="applicationType">
<
Attribute name="actions" />
<
Value>CREATE=true</
Value>
<
Value>UPDATE=true</
Value>
<
Value>DELETE=true</
Value>
<
Value>PATCH=true</
Value>
<
Value>ACTION=true</
Value>
<
Value>QUERY=true</
Value>
<
Attribute name="searchIndexImpl" />
<
Attribute name="saveIndexImpl" />
<
Attribute name="resourceComparator" />
<
SubConfiguration name="sunIdentityServerDiscoveryService" <
Attribute name="actions" />
<
Value>LOOKUP=true</
Value>
<
Value>UPDATE=true</
Value>
<
Attribute name="searchIndexImpl" />
<
Attribute name="saveIndexImpl" />
<
Attribute name="resourceComparator" />
<
SubConfiguration name="sunIdentityServerLibertyPPService" <
Attribute name="actions" />
<
Value>QUERY_allow=true</
Value>
<
Value>QUERY_deny=false</
Value>
<
Value>QUERY_interactForValue=false</
Value>
<
Value>QUERY_interactForConsent=false</
Value>
<
Value>MODIFY_allow=true</
Value>
<
Value>MODIFY_deny=false</
Value>
<
Value>MODIFY_interactForValue=false</
Value>
<
Value>MODIFY_interactForConsent=false</
Value>
<
Attribute name="nonBooleanActionValues" />
<
Value>QUERY=deny,allow,interactForValue,interactForConsent</
Value>
<
Value>MODIFY=deny,allow,interactForValue,interactForConsent</
Value>
<
Attribute name="searchIndexImpl" />
<
Attribute name="saveIndexImpl" />
<
Attribute name="resourceComparator" />
<
SubConfiguration name="sunAMDelegationService" <
Attribute name="actions" />
<
Value>MODIFY=true</
Value>
<
Value>DELEGATE=true</
Value>
<
Attribute name="searchIndexImpl" />
<
Attribute name="saveIndexImpl" />
<
Attribute name="resourceComparator" />
<
SubConfiguration name="openProvisioning" <
Attribute name="actions" />
<
Value>CREATE=true</
Value>
<
Value>UPDATE=true</
Value>
<
Value>DELETE=true</
Value>
<
Attribute name="searchIndexImpl" />
<
Attribute name="saveIndexImpl" />
<
Attribute name="resourceComparator" />
<
SubConfiguration name="banking" <
Attribute name="actions" />
<
Value>TRANSFER=true</
Value>
<
Attribute name="searchIndexImpl" />
<
Attribute name="saveIndexImpl" />
<
Attribute name="resourceComparator" />
<
SubConfiguration name="webservices" <
Attribute name="applicationClassName" />
<
Attribute name="searchIndexImpl" />
<
Attribute name="saveIndexImpl" />
<
Attribute name="resourceComparator" />
<
OrganizationConfiguration name="/">
<
SubConfiguration name="registeredApplications" <
SubConfiguration name="iPlanetAMWebAgentService" <
Attribute name="applicationType" />
<
Value>iPlanetAMWebAgentService</
Value>
<
Attribute name="resources" />
<
Attribute name="subjects" />
<
Attribute name="conditions" />
<
Value>daysOfWeek</
Value>
<
Attribute name="entitlementCombiner" />
<
SubConfiguration name="crestPolicyService" id="application">
<
Attribute name="applicationType" />
<
Value>crestPolicyService</
Value>
<
Attribute name="resources" />
<
Attribute name="subjects" />
<
Attribute name="conditions" />
<
Value>daysOfWeek</
Value>
<
Attribute name="entitlementCombiner" />
<
SubConfiguration name="sunIdentityServerDiscoveryService" <
Attribute name="applicationType" />
<
Value>sunIdentityServerDiscoveryService</
Value>
<
Attribute name="resources" />
<
Attribute name="subjects" />
<
Attribute name="conditions" />
<
Value>daysOfWeek</
Value>
<
Attribute name="entitlementCombiner" />
<
SubConfiguration name="sunIdentityServerLibertyPPService" <
Attribute name="applicationType" />
<
Value>sunIdentityServerLibertyPPService</
Value>
<
Attribute name="resources" />
<
Attribute name="subjects" />
<
Attribute name="conditions" />
<
Value>daysOfWeek</
Value>
<
Attribute name="entitlementCombiner" />
<
SubConfiguration name="sunAMDelegationService" <
Attribute name="applicationType" />
<
Value>sunAMDelegationService</
Value>
<
Attribute name="resources" />
<
Attribute name="subjects" />
<
Attribute name="entitlementCombiner" />
<
SubConfiguration name="openProvisioning" <
Attribute name="applicationType" />
<
Value>openProvisioning</
Value>
<
Attribute name="resources" />
<
Attribute name="entitlementCombiner" />
<
SubConfiguration name="paycheck" <
Attribute name="applicationType" />
<
Value>iPlanetAMWebAgentService</
Value>
<
Attribute name="resources" />
<
Attribute name="subjects" />
<
Attribute name="conditions" />
<
Attribute name="entitlementCombiner" />
<
SubConfiguration name="calendar" <
Attribute name="applicationType" />
<
Value>iPlanetAMWebAgentService</
Value>
<
Attribute name="resources" />
<
Attribute name="subjects" />
<
Attribute name="conditions" />
<
Value>daysOfWeek</
Value>
<
Attribute name="entitlementCombiner" />
<
SubConfiguration name="im" <
Attribute name="applicationType" />
<
Value>iPlanetAMWebAgentService</
Value>
<
Attribute name="resources" />
<
Attribute name="subjects" />
<
Attribute name="conditions" />
<
Value>daysOfWeek</
Value>
<
Attribute name="entitlementCombiner" />
<
SubConfiguration name="sunBank" <
Attribute name="applicationType" />
<
Attribute name="resources" />
<
Attribute name="subjects" />
<
Attribute name="conditions" />
<
Value>upperTransferLimit</
Value>
<
Value>lowerTransferLimit</
Value>
<
Value>anyTransferLimit</
Value>
<
Value>daysOfWeek</
Value>
<
Attribute name="entitlementCombiner" />
<
SubConfiguration name="subjectAttributesCollectors" id="subjectAttributesCollectors">
<
SubConfiguration name="OpenSSO" id="OpenSSOSubjectAttributesCollector">
<
Attribute name="class" />
<
Attribute name="groupMembershipSearchIndexEnabled" />
</
OrganizationConfiguration>