amAuthLDAP.xml revision b0465323d102d12fdad78489cccc5e6a379db9e0
1N/A<?xml version="1.0" encoding="ISO-8859-1"?>
1N/A
1N/A<!--
1N/A DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
1N/A
1N/A Copyright (c) 2006 Sun Microsystems Inc. All Rights Reserved
1N/A
1N/A The contents of this file are subject to the terms
1N/A of the Common Development and Distribution License
1N/A (the License). You may not use this file except in
1N/A compliance with the License.
1N/A
1N/A You can obtain a copy of the License at
1N/A https://opensso.dev.java.net/public/CDDLv1.0.html or
1N/A opensso/legal/CDDLv1.0.txt
1N/A See the License for the specific language governing
1N/A permission and limitations under the License.
1N/A
1N/A When distributing Covered Code, include this CDDL
1N/A Header Notice in each file and include the License file
1N/A at opensso/legal/CDDLv1.0.txt.
1N/A If applicable, add the following below the CDDL Header,
1N/A with the fields enclosed by brackets [] replaced by
1N/A your own identifying information:
1N/A "Portions Copyrighted [year] [name of copyright owner]"
1N/A
1N/A $Id: amAuthLDAP.xml,v 1.8 2010/01/25 22:09:17 qcheng Exp $
1N/A
1N/A Portions Copyrighted 2011-2016 ForgeRock AS.
1N/A-->
1N/A
1N/A<!DOCTYPE ServicesConfiguration
1N/A PUBLIC "=//iPlanet//Service Management Services (SMS) 1.0 DTD//EN"
1N/A "jar://com/sun/identity/sm/sms.dtd">
1N/A
1N/A<ServicesConfiguration>
1N/A <Service name="iPlanetAMAuthLDAPService" version="1.0">
1N/A <Schema
1N/A serviceHierarchy="/DSAMEConfig/authentication/iPlanetAMAuthLDAPService"
1N/A i18nFileName="amAuthLDAP"
1N/A revisionNumber="30"
1N/A i18nKey="iplanet-am-auth-ldap-service-description"
1N/A resourceName="ldap">
1N/A
1N/A <Organization>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-server"
1N/A type="list"
1N/A syntax="string"
1N/A i18nKey="a101"
1N/A resourceName="primaryLdapServer">
1N/A <DefaultValues>
1N/A <Value>@UM_DIRECTORY_SERVER@:@UM_DIRECTORY_PORT@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-server2"
1N/A type="list"
1N/A syntax="string"
1N/A i18nKey="a102"
1N/A resourceName="secondaryLdapServer">
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-base-dn"
1N/A type="list"
1N/A syntax="dn"
1N/A i18nKey="a103"
1N/A resourceName="userSearchStartDN">
1N/A <DefaultValues>
1N/A <Value>@UM_NORMALIZED_ORGBASE@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-bind-dn"
1N/A type="single"
1N/A syntax="dn"
1N/A i18nKey="a104"
1N/A resourceName="userBindDN">
1N/A <DefaultValues>
1N/A <Value>@UM_DS_DIRMGRDN@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-bind-passwd"
1N/A type="single"
1N/A syntax="password"
1N/A i18nKey="a105"
1N/A resourceName="userBindPassword">
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-user-naming-attribute"
1N/A type="single"
1N/A syntax="string"
1N/A i18nKey="a106"
1N/A resourceName="userProfileRetrievalAttribute">
1N/A <DefaultValues>
1N/A <Value>@USER_NAMING_ATTR@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-user-search-attributes"
1N/A type="list"
1N/A syntax="string"
1N/A i18nKey="a107"
1N/A resourceName="userSearchAttributes">
1N/A <DefaultValues>
1N/A <Value>@USER_NAMING_ATTR@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-search-filter"
1N/A type="single"
1N/A syntax="xml"
1N/A i18nKey="a108"
1N/A resourceName="userSearchFilter">
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-search-scope"
1N/A type="single_choice"
1N/A syntax="string"
1N/A i18nKey="a109"
1N/A resourceName="searchScope">
1N/A <ChoiceValues>
1N/A <ChoiceValue i18nKey="choiceObject">OBJECT</ChoiceValue>
1N/A <ChoiceValue i18nKey="choiceOneLevel">ONELEVEL</ChoiceValue>
1N/A <ChoiceValue i18nKey="choiceSubTree">SUBTREE</ChoiceValue>
1N/A </ChoiceValues>
1N/A <DefaultValues>
1N/A <Value>SUBTREE</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="openam-auth-ldap-connection-mode"
1N/A type="single_choice"
1N/A syntax="string"
1N/A i18nKey="a110">
1N/A <ChoiceValues>
1N/A <ChoiceValue i18nKey="a1101">LDAP</ChoiceValue>
1N/A <ChoiceValue i18nKey="a1102">LDAPS</ChoiceValue>
1N/A <ChoiceValue i18nKey="a1103">StartTLS</ChoiceValue>
1N/A </ChoiceValues>
1N/A <DefaultValues>
1N/A <Value>@LDAP_CONNECTION_MODE@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="openam-auth-ldap-secure-protocol-version"
1N/A type="single_choice"
1N/A syntax="string"
1N/A i18nKey="a11021">
1N/A <ChoiceValues>
1N/A <ChoiceValue i18nKey="a110211">TLSv1</ChoiceValue>
1N/A <ChoiceValue i18nKey="a110212">TLSv1.1</ChoiceValue>
1N/A <ChoiceValue i18nKey="a110213">TLSv1.2</ChoiceValue>
1N/A </ChoiceValues>
1N/A <DefaultValues>
1N/A <Value>TLSv1</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-ssl-trust-all"
1N/A type="single"
1N/A syntax="boolean"
1N/A i18nKey="a117"
1N/A resourceName="trustAllServerCertificates">
1N/A <BooleanValues>
1N/A <BooleanTrueValue i18nKey="i18nTrue">true</BooleanTrueValue>
1N/A <BooleanFalseValue i18nKey="i18nFalse">false</BooleanFalseValue>
1N/A </BooleanValues>
1N/A <DefaultValues>
1N/A <Value>false</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-return-user-dn"
1N/A type="single"
1N/A syntax="boolean"
1N/A i18nKey="a111"
1N/A resourceName="returnUserDN">
1N/A <BooleanValues>
1N/A <BooleanTrueValue i18nKey="i18nTrue">true</BooleanTrueValue>
1N/A <BooleanFalseValue i18nKey="i18nFalse">false</BooleanFalseValue>
1N/A </BooleanValues>
1N/A <DefaultValues>
1N/A <Value>true</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-auth-level"
1N/A type="single"
1N/A syntax="number_range" rangeStart="0" rangeEnd="2147483647"
1N/A i18nKey="a500"
1N/A resourceName="authenticationLevel">
1N/A <DefaultValues>
1N/A <Value>0</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-ldap-user-creation-attr-list"
1N/A type="list"
1N/A syntax="string"
1N/A i18nKey="a114"
1N/A resourceName="profileAttributeMappings">
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-invalid-chars"
1N/A type="list"
1N/A syntax="string"
1N/A i18nKey="">
1N/A <DefaultValues>
1N/A <Value>*|(|)|&amp;|!</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-min-password-length"
1N/A type="single"
1N/A syntax="string"
1N/A i18nKey="a115"
1N/A resourceName="minimumPasswordLength">
1N/A <DefaultValues>
1N/A <Value>8</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-behera-password-policy-enabled"
1N/A type="single"
1N/A syntax="boolean"
1N/A i18nKey="a116"
1N/A resourceName="beheraPasswordPolicySupportEnabled">
1N/A <BooleanValues>
1N/A <BooleanTrueValue i18nKey="i18nTrue">true</BooleanTrueValue>
1N/A <BooleanFalseValue i18nKey="i18nFalse">false</BooleanFalseValue>
1N/A </BooleanValues>
1N/A <DefaultValues>
1N/A <Value>true</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="openam-auth-ldap-heartbeat-interval"
1N/A type="single"
1N/A syntax="number"
1N/A i18nKey="a118"
1N/A resourceName="connectionHeartbeatInterval">
1N/A <DefaultValues>
1N/A <Value>10</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="openam-auth-ldap-heartbeat-timeunit"
1N/A type="single_choice"
1N/A syntax="string"
1N/A i18nKey="a119"
1N/A resourceName="connectionHeartbeatTimeUnit">
1N/A <ChoiceValues>
1N/A <ChoiceValue i18nKey="a1191">SECONDS</ChoiceValue>
1N/A <ChoiceValue i18nKey="a1192">MINUTES</ChoiceValue>
1N/A <ChoiceValue i18nKey="a1193">HOURS</ChoiceValue>
1N/A </ChoiceValues>
1N/A <DefaultValues>
1N/A <Value>SECONDS</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="openam-auth-ldap-operation-timeout"
1N/A type="single"
1N/A syntax="number"
1N/A i18nKey="a120"
1N/A resourceName="operationTimeout">
1N/A <DefaultValues>
1N/A <Value>0</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <SubSchema name="serverconfig" inheritance="multiple" resourceName="USE-PARENT">
1N/A <AttributeSchema name="iplanet-am-auth-ldap-server"
1N/A type="list"
1N/A syntax="string"
1N/A i18nKey="a101"
1N/A resourceName="primaryLdapServer">
1N/A <DefaultValues>
1N/A <Value>@UM_DIRECTORY_SERVER@:@UM_DIRECTORY_PORT@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-server2"
1N/A type="list"
1N/A syntax="string"
1N/A i18nKey="a102"
1N/A resourceName="secondaryLdapServer">
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-base-dn"
1N/A type="list"
1N/A syntax="dn"
1N/A i18nKey="a103"
1N/A resourceName="userSearchStartDN">
1N/A <DefaultValues>
1N/A <Value>@UM_NORMALIZED_ORGBASE@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-bind-dn"
1N/A type="single"
1N/A syntax="dn"
1N/A i18nKey="a104"
1N/A resourceName="userBindDN">
1N/A <DefaultValues>
1N/A <Value>@UM_DS_DIRMGRDN@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-bind-passwd"
1N/A type="single"
1N/A syntax="password"
1N/A i18nKey="a105"
1N/A resourceName="userBindPassword">
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-user-naming-attribute"
1N/A type="single"
1N/A syntax="string"
1N/A i18nKey="a106"
1N/A resourceName="userProfileRetrievalAttribute">
1N/A <DefaultValues>
1N/A <Value>@USER_NAMING_ATTR@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-user-search-attributes"
1N/A type="list"
1N/A syntax="string"
1N/A i18nKey="a107"
1N/A resourceName="userSearchAttributes">
1N/A <DefaultValues>
1N/A <Value>@USER_NAMING_ATTR@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-search-filter"
1N/A type="single"
1N/A syntax="xml"
1N/A i18nKey="a108"
1N/A resourceName="userSearchFilter">
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-search-scope"
1N/A type="single_choice"
1N/A syntax="string"
1N/A i18nKey="a109"
1N/A resourceName="searchScope">
1N/A <ChoiceValues>
1N/A <ChoiceValue i18nKey="choiceObject">OBJECT</ChoiceValue>
1N/A <ChoiceValue i18nKey="choiceOneLevel">ONELEVEL</ChoiceValue>
1N/A <ChoiceValue i18nKey="choiceSubTree">SUBTREE</ChoiceValue>
1N/A </ChoiceValues>
1N/A <DefaultValues>
1N/A <Value>SUBTREE</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="openam-auth-ldap-connection-mode"
1N/A type="single_choice"
1N/A syntax="string"
1N/A i18nKey="a110">
1N/A <ChoiceValues>
1N/A <ChoiceValue i18nKey="a1101">LDAP</ChoiceValue>
1N/A <ChoiceValue i18nKey="a1102">LDAPS</ChoiceValue>
1N/A <ChoiceValue i18nKey="a1103">StartTLS</ChoiceValue>
1N/A </ChoiceValues>
1N/A <DefaultValues>
1N/A <Value>@LDAP_CONNECTION_MODE@</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="openam-auth-ldap-secure-protocol-version"
1N/A type="single_choice"
1N/A syntax="string"
1N/A i18nKey="a11021">
1N/A <ChoiceValues>
1N/A <ChoiceValue i18nKey="a110211">TLSv1</ChoiceValue>
1N/A <ChoiceValue i18nKey="a110212">TLSv1.1</ChoiceValue>
1N/A <ChoiceValue i18nKey="a110213">TLSv1.2</ChoiceValue>
1N/A </ChoiceValues>
1N/A <DefaultValues>
1N/A <Value>TLSv1</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-ssl-trust-all"
1N/A type="single"
1N/A syntax="boolean"
1N/A i18nKey="a117"
1N/A resourceName="trustAllServerCertificates">
1N/A <BooleanValues>
1N/A <BooleanTrueValue i18nKey="i18nTrue">true</BooleanTrueValue>
1N/A <BooleanFalseValue i18nKey="i18nFalse">false</BooleanFalseValue>
1N/A </BooleanValues>
1N/A <DefaultValues>
1N/A <Value>false</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-return-user-dn"
1N/A type="single"
1N/A syntax="boolean"
1N/A i18nKey="a111"
1N/A resourceName="returnUserDN">
1N/A <BooleanValues>
1N/A <BooleanTrueValue i18nKey="i18nTrue">true</BooleanTrueValue>
1N/A <BooleanFalseValue i18nKey="i18nFalse">false</BooleanFalseValue>
1N/A </BooleanValues>
1N/A <DefaultValues>
1N/A <Value>true</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-auth-level"
1N/A type="single"
1N/A syntax="number_range" rangeStart="0" rangeEnd="2147483647"
1N/A i18nKey="a500"
1N/A resourceName="authenticationLevel">
1N/A <DefaultValues>
1N/A <Value>0</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-ldap-user-creation-attr-list"
1N/A type="list"
1N/A syntax="string"
1N/A i18nKey="a114"
1N/A resourceName="profileAttributeMappings">
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-invalid-chars"
1N/A type="list"
1N/A syntax="string"
1N/A i18nKey="">
1N/A <DefaultValues>
1N/A <Value>*|(|)|&amp;|!</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-min-password-length"
1N/A type="single"
1N/A syntax="string"
1N/A i18nKey="a115"
1N/A resourceName="minimumPasswordLength">
1N/A <DefaultValues>
1N/A <Value>8</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="iplanet-am-auth-ldap-behera-password-policy-enabled"
1N/A type="single"
1N/A syntax="boolean"
1N/A i18nKey="a116"
1N/A resourceName="beheraPasswordPolicySupportEnabled">
1N/A <BooleanValues>
1N/A <BooleanTrueValue i18nKey="i18nTrue">true</BooleanTrueValue>
1N/A <BooleanFalseValue i18nKey="i18nFalse">false</BooleanFalseValue>
1N/A </BooleanValues>
1N/A <DefaultValues>
1N/A <Value>true</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="openam-auth-ldap-heartbeat-interval"
1N/A type="single"
1N/A syntax="number"
1N/A i18nKey="a118"
1N/A resourceName="connectionHeartbeatInterval">
1N/A <DefaultValues>
1N/A <Value>10</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="openam-auth-ldap-heartbeat-timeunit"
1N/A type="single_choice"
1N/A syntax="string"
1N/A i18nKey="a119"
1N/A resourceName="connectionHeartbeatTimeUnit">
1N/A <ChoiceValues>
1N/A <ChoiceValue i18nKey="a1191">SECONDS</ChoiceValue>
1N/A <ChoiceValue i18nKey="a1192">MINUTES</ChoiceValue>
1N/A <ChoiceValue i18nKey="a1193">HOURS</ChoiceValue>
1N/A </ChoiceValues>
1N/A <DefaultValues>
1N/A <Value>SECONDS</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A <AttributeSchema name="openam-auth-ldap-operation-timeout"
1N/A type="single"
1N/A syntax="number"
1N/A i18nKey="a120"
1N/A resourceName="operationTimeout">
1N/A <DefaultValues>
1N/A <Value>0</Value>
1N/A </DefaultValues>
1N/A </AttributeSchema>
1N/A </SubSchema>
1N/A </Organization>
1N/A </Schema>
1N/A <Configuration>
1N/A <OrganizationConfiguration name="/">
1N/A <AttributeValuePair>
1N/A <Attribute name="iplanet-am-auth-ldap-bind-passwd"/>
1N/A <Value>@UM_DS_DIRMGRPASSWD@</Value>
1N/A </AttributeValuePair>
1N/A </OrganizationConfiguration>
1N/A </Configuration>
1N/A </Service>
1N/A</ServicesConfiguration>
1N/A