386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Copyright (c) 2006 Sun Microsystems Inc. All Rights Reserved
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# The contents of this file are subject to the terms
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# of the Common Development and Distribution License
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# (the License). You may not use this file except in
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# compliance with the License.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# You can obtain a copy of the License at
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# https://opensso.dev.java.net/public/CDDLv1.0.html or
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# See the License for the specific language governing
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# permission and limitations under the License.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# When distributing Covered Code, include this CDDL
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Header Notice in each file and include the License file
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# If applicable, add the following below the CDDL Header,
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# with the fields enclosed by brackets [] replaced by
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# your own identifying information:
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# "Portions Copyrighted [year] [name of copyright owner]"
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# $Id: AMClient.properties,v 1.24 2009/08/12 17:43:03 beomsuk Exp $
2fe1e6ab330f5f88e97684012ff29cde7e61c9c4Dirk Hogan# Portions Copyrighted 2010-2015 ForgeRock AS.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major/* The following keys are used to configure the Debug service.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Possible values for the key 'level' are: off | error | warning | message.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * The key 'directory' specifies the output directory where the debug files
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * will be created.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Trailing spaces are significant.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Windows: Use forward slashes "/" separate directories, not backslash "\".
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Windows: Spaces in the file name are allowed for Windows.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Server mode should be 'false'
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Cache enable / disable properties
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Refresh time for appssotoken, value in minutes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Logging status
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * SDK package name
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.sdk.package=com.iplanet.am.sdk.remote
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Configure remote plugin classes for configuration (SMS)
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.sm.sms_object_class_name=com.sun.identity.sm.jaxrpc.SMSJAXRPCObject
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Naming URL
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Notification URL
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.client.notification.url=@NOTIFICATION_URL@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Security Credentails to read the configuration data
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.agents.app.username=@APPLICATION_USER@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.service.password=@APPLICATION_PASSWD@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.service.secret=@ENCODED_APPLICATION_PASSWORD@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Encryption key that will be used to encrypt and decypt
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * data to communicate with the server.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * This key is needed to decrypt passwords stored
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * in the SMS configuration.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majoram.encryption.pwd=@ENCRYPTION_KEY@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Encryption key that will be used to encrypt and decypt
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * data used locally within the client.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.client.encryptionKey=@ENCRYPTION_KEY_LOCAL@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Encryption: The key "com.iplanet.security.encryptor" specifies
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * the encrypting class implementation.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Available classes are:
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.security.encryptor=com.iplanet.services.util.JCEEncryption
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Property to enable/disable the notifications for am.sdk and IdRepo Caches.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * If set to "true" notifications are enabled and disabled if set to "false".
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.idm.remote.notification.enabled=false
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Property to enable/disable the notifications for service management caches.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * If set to "true" notifications are enabled and disabled if set to "false".
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Cache update time (in minutes) for am.sdk & IdRepo Caches
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * if notification URL is not provided or if notifications are disabled.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * 1. This property is applicable only if
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * is not provided or if 'com.sun.identity.idm.remote.notification.enabled'
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * is set to 'false'.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * 2. If the polling time is set as 0, then polling is disabled.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Cache update time (in minutes) for service configutation data,
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * if notification URL is not provided or if notifications are disabled.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * 1. This property is applicable only if
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * is not provided or if 'com.sun.identity.sm.notification.enabled' is
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * set to 'false'.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * 2. If the cache time is set as 0, then no cache updates will occur.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* The following are the properties to configure service management Cache for
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* TTL. If the property 'com.sun.identity.sm.cache.ttl.enable' is set to
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* true, the cache entries will expire based on the time specified in the
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* property "com.sun.identity.sm.cache.ttl" (in minutes).
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* The following are the properties to configure IdRepo cache for TTL.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* If the property 'com.sun.identity.idm.cache.entry.expire.enabled' is set to
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* true, the cache entries will expire based on the time specified in the
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* properties below. The properties 'com.sun.identity.idm.cache.user.expire.time'
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* & 'com.sun.identity.idm.cache.default.expire.time' specify time in minutes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* for which the user & non-user entries respectively remain valid after their
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* last modification. In other words after this specified period of time
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* elapses (after the last modification/read from the directory), the data
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* for the entry that is cached will expire. At that instant new requests for
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* data for these entries will result in reading it from the IdRepo plugins.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.idm.cache.entry.expire.enabled=true
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.idm.cache.entry.user.expire.time=1
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.idm.cache.entry.default.expire.time=1
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* The following are the properties to configure AMSDK plugin Cache for TTL.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* If the property 'com.iplanet.am.sdk.cache.entry.expire.enabled' is set to
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* true, the cache entries will expire based on the time specified in the
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* properties below. The properties 'com.iplanet.am.sdk.cache.user.expire.time'
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* & 'com.iplanet.am.sdk.cache.default.expire.time' specify time in minutes for
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* which the user & non-user entries respectively remain valid after their last
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* modification. In other words after this specified period of time elapses
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* (after the last modification/read from the directory), the data for the
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* entry that is cached will expire. At that instant new requests for data for
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* these entries will result in reading it from the Directory.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.sdk.cache.entry.expire.enabled=true
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.sdk.cache.entry.user.expire.time=1
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.sdk.cache.entry.default.expire.time=1
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Server protocol, host and port to be used by Client Services
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.services.deploymentDescriptor=@DEPLOY_URI@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.console.protocol=@CONSOLE_PROTOCOL@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.console.deploymentDescriptor=@CONSOLE_DEPLOY_URI@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Session related properties.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.session.client.polling.enable=true
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Identify cert db directory path, prefix and password file
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * to initialize JSS Socket Factory when Web Container is configured SSL
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.admin.cli.certdb.dir=@CONTAINER_CERTDB_DIR@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.admin.cli.certdb.prefix=@CONTAINER_CERTDB_PREFIX@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.admin.cli.certdb.passfile=@BASEDIR@/@PRODUCT_DIR@/config/.wtpass
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Identify property value for SSL ApprovalCallback / HostnameVerifier
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * If com.iplanet.services.comm is configured as protocol handler
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * and the checkSubjectAltName or resolveIPAddress feature is enabled,
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * com.iplanet.am.admin.cli.certdb.prefix will have to be created under
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * the directory of com.iplanet.am.admin.cli.certdb.dir before server is
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * restarted.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.jssproxy.trustAllServerCerts=false
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.iplanet.am.jssproxy.checkSubjectAltName=false
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major/**************************************************************
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Policy Client parameters
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major **************************************************************/
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major/* Policy decision log parameters. Possible values for logging.level
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * are NONE, ALLOW, DENY, BOTH, and DECISION */
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.agents.server.log.file.name=amRemotePolicyLog
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major/* Notification URL for updating cache */
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.agents.notification.enabled=false
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.agents.notification.url=@NOTIFICATION_URL@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major/* Cache time in minutes */
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major/* Information to cache. Possible value are "subtree" or "self" */
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major/* Policy client clock skew value in seconds */
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* Explicitly disable monitoring services in the client applications.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major* Specify if allow to use cached data for HttpURLConnection
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Property to enable or disable to use the metro implementation
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * for ws-trust client.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.wss.trustclient.enablemetro=false
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Property to use the SOAP version for ws-trust client. The containers
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * that do not support JavaEE5 should use the version 1.1 but make sure that
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * the STS service is compatible with 1.1 version.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * This property defines interval in seconds for web services security
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * cache timeout.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.wss.security.cache.timeout.interval=300
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * This property defines an interval in seconds for cleaning up the
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * web services security cache.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.wss.security.cache.cleanup.interval=60
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * This property indicates a plugin class for WSSCacheRepository that can be
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * used for storing web services security cache persistently.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.wss.security.cacherepository.plugin=
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * This property is used by the standone SAML Tokens in web services security
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * for the issuer name. If this property is not set, they will use the server
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * host name as the default.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.wss.security.samlassertion.issuer=
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * This property is used to define the time skew in milli seconds used when
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * the time stamps are validated.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Policy ResourceComparators to be used for different service names
386650a8957e131311273ee84a4a4113ad5e3fe2Peter MajorserviceType=iPlanetAMWebAgentService|class=com.sun.identity.policy.plugins.HttpURLResourceName|wildcard=*|delimiter=/|caseSensitive=false|oneLevelWildCard=-*-
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Protocol handler pkg name for HTTPS protocol.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Default value is none.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * Available impl classes are:
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * When the Site monitoring needs to be disabled, set this property to true
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * When a client SDK application runs in the same container as the OpenAM server
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major * this property might be set to true
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Specify implementation class for
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# com.sun.identity.plugin.configuration.ConfigurationInstance interface.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.plugin.configuration.class=@CONFIGURATION_PROVIDER_CLASS@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Specify implementation class for
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# com.sun.identity.plugin.datastore.DataStoreProvider interface.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# This property defines the default datastore provider.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.plugin.datastore.class.default=@DATASTORE_PROVIDER_CLASS@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Specify implementation class for
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# com.sun.identity.plugin.session.SessionProvider interface.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.plugin.session.class=@SESSION_PROVIDER_CLASS@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Specify XML signature provider class
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.saml.xmlsig.signatureprovider.class=com.sun.identity.saml.xmlsig.AMSignatureProvider
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Specify XML key provider implementation class
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.saml.xmlsig.keyprovider.class=com.sun.identity.saml.xmlsig.JKSKeyProvider
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Identify SAML XML signature keystore file, keystore password file
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# and key password file
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.saml.xmlsig.keystore=@BASE_DIR@/keystore.jks
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.saml.xmlsig.storepass=@BASE_DIR@/.storepass
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.saml.xmlsig.keypass=@BASE_DIR@/.keypass
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Specify type of KeyStore used for saml xml signature. Default is JKS.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Flag for checking the Certificate which is embedded in the
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# KeyInfo against the certificates in the keystore (specified
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# by the "com.sun.identity.saml.xmlsig.keystore" property).
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Possible values for the key are: on|off. If the flag is "on",
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# the certification must be presented in the keystore for
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# XML signature validation. If the flag is "off", skip
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# the presence checking.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# XML cannonicalization algorithm. Used for SAML XML signature generation
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# and verification. When not specified, or value is empty, default value
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# will be used. The following is the list of supported algorithms:
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/10/xml-exc-c14n# (default)
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/10/xml-exc-c14n#WithComments
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/TR/2001/REC-xml-c14n-20010315
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.saml.xmlsig.c14nMethod=http://www.w3.org/2001/10/xml-exc-c14n#
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# XML signature algorithm. Used for SAML XML Signature generation and
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# verification. When not specified, or value is empty, default value will be
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# used. The following is the list of supported algorithms:
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2000/09/xmldsig#rsa-sha1 (default)
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/04/xmldsig-more#hmac-md5
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/04/xmldsig-more#hmac-sha256
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/04/xmldsig-more#hmac-sha384
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/04/xmldsig-more#hmac-sha512
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# XML transformation algorithm. Used for SAML XML signature generation
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# and verification. When not specified, or value is empty, default value
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# will be used. The following is the list of supported algorithms:
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/10/xml-exc-c14n# (default)
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2001/10/xml-exc-c14n#WithComments
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/TR/2001/REC-xml-c14n-20010315
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.w3.org/2000/09/xmldsig#enveloped-signature
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# http://www.nue.et-inf.uni-siegen.de/~geuer-pollmann/#xpathFilter
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.saml.xmlsig.transformAlg=http://www.w3.org/2001/10/xml-exc-c14n#
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# SAML2 XML Encryption Provider Implementation class
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.saml2.xmlenc.EncryptionProvider=com.sun.identity.saml2.xmlenc.FMEncProvider
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# SAML2 XML Signing Provider Implementation class.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.saml2.xmlsig.SignatureProvider=com.sun.identity.saml2.xmlsig.FMSigProvider
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# SAML2 XML Signing Certificate Validation.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# SAML2 XML Signing Certificate Validation.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Client ceritificate alias that will be used in SSL connection for Liberty
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# SOAP Binding
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# If the message timestamp is before current timestamp by this amount
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# (millisec), it is considered a stale message.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.ws.soap.staleTimeLimit=300000
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# All the messageID of a valid message will be stored in a cache with the it
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# is received to avoid duplicate messages. If the current time minus the
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# received time is greater than the above staleTimeLimit, it should be removed
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# from the cache. The is property specify the interval(millisec) that a
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# cleanup thread should check the cache and remove those messageID.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.ws.soap.messageIDCacheCleanupInterval=60000
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Supported SOAP actors. Each actor must be seperated by '|'
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.ws.soap.supportedActors=http://schemas.xmlsoap.org/soap/actor/next
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Namespace prefix mapping used when marshalling a JAXB content tree to a
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# DOM tree. The syntax is
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# <prefix>=<namespace>|<prefix>=<namespace>|..........
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.ws.jaxb.namespacePrefixMappingList=S=http://schemas.xmlsoap.org/soap/envelope/|sb=urn:liberty:sb:2003-08|pp=urn:liberty:id-sis-pp:2003-08|ispp=http://www.sun.com/identity/liberty/pp|is=urn:liberty:is:2003-08
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# JAXB package list used when constructing JAXBContext. Each package must be
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# seperated by ':'.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Liberty ID-WSF security profile,
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# com.sun.identity.liberty.ws.wsc.certalias specifies default certificate
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# alias for issuing web service security token for this web service client
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# com.sun.identity.liberty.ws.ta.certalias specifies certificate
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# alias for trusted authority that will be used to sign SAML or SAML
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# BEARER token of response message.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# com.sun.identity.liberty.ws.trustedca.certaliases specifies certificate
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# aliases for trusted CA. SAML or SAML BEARER token of incoming request
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# message needs to be signed by a trusted CA in this list. The syntax is
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# <cert alias 1>[:<issuer 1>]|<cert alias 2>[:<issuer 2>]|.....
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# For example, 'myalias1:myissuer1|myalias2|myalias3:myissuer3
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# 'issuer' is used when the token doesn't have a KeyInfo inside the
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# signature. The 'issuer' of the token needs to be in this list and the
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# corresponding cert alias will be used to verify signature. If KeyInfo
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# exists, the keystore needs to contain a cert alias that matches the
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# KeyInfo and the cert alias needs to be in this list.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# com.sun.identity.liberty.ws.security.TokenProviderImpl specifies
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# implementation for security token provider
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.ws.trustedca.certaliases=test:SunSTS|test:@SERVER_HOST@
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.ws.security.TokenProviderImpl=com.sun.identity.liberty.ws.security.LibSecurityTokenProvider
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# URL for WSPRedirectHandlerServlet to handle Liberty WSF WSP-resource owner
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# interactions based on user agent redirects. This should be running in
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# the same JVM where Liberty SP is running
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.interaction.wspRedirectHandler=@SERVER_PROTOCOL@://@SERVER_HOST@:@SERVER_PORT@/@DEPLOY_URI@/WSPRedirectHandler
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# indicates whether WSC would participate in interaction
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# valid values are interactIfNeeded | doNotInteract | doNotInteractForData
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# default value:interactIfNeeded
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# value used if an invalid value is specified:interactIfNeeded
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.interaction.wscSpecifiedInteractionChoice=interactIfNeeded
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# indicates whether WSC would include userInteractionHeader
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# valid values are yes|no (case ignored)
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# default value:yes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# value used if no value is specified:yes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.interaction.wscWillInlcudeUserInteractionHeader=yes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# indicates whether WSC would redirect user for interaction
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# valid values are yes|no
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# default value:yes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# value used if no value is specified:yes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.interaction.wscWillRedirect=yes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# WSC's preference on the acceptable duration for interaction(in seconds)
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# default value if the value is not specified or a non integer value is
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# specified : 60
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.interaction.wscSpecifiedMaxInteractionTime=80
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# indicates whether WSC would enforce that redirected to URL is https
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# valid values are yes|no (case ignored)
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# liberty specification require the value to be yes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# default value:yes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# value used if no value is specified:yes
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.interaction.wscWillEnforceHttpsCheck=no
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# This property is used to determine the Liberty identity web services framework
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# to be used when the framework can not determine from the in-bound message or
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# from the resource offering when AM is acting as the WSC.
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# The default version is 1.1, but the possible values are 1.0 or 1.1
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Web Services Security Client Properties
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Login URL for WSS end user authentication use cases
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.loginurl=@SERVER_PROTOCOL@://@SERVER_HOST@:@SERVER_PORT@/@DEPLOY_URI@/UI/Login
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Login URL redirection ("goto") paramter name for WSS end user authentication use cases
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Major# Authentication web service URL for WSS Liberty use cases
386650a8957e131311273ee84a4a4113ad5e3fe2Peter Majorcom.sun.identity.liberty.authnsvc.url=@SERVER_PROTOCOL@://@SERVER_HOST@:@SERVER_PORT@/@DEPLOY_URI@/Liberty/authnsvc