1194N/A#

1194N/A# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.

1194N/A#

1194N/A# Copyright (c) 2006 Sun Microsystems Inc. All Rights Reserved

1194N/A#

1194N/A# The contents of this file are subject to the terms

1194N/A# of the Common Development and Distribution License

1194N/A# (the License). You may not use this file except in

1194N/A# compliance with the License.

1194N/A#

1194N/A# You can obtain a copy of the License at

1194N/A# https://opensso.dev.java.net/public/CDDLv1.0.html or

1194N/A# opensso/legal/CDDLv1.0.txt

1194N/A# See the License for the specific language governing

1194N/A# permission and limitations under the License.

1194N/A#

1194N/A# When distributing Covered Code, include this CDDL

1194N/A# Header Notice in each file and include the License file

1220N/A# at opensso/legal/CDDLv1.0.txt.

1194N/A# If applicable, add the following below the CDDL Header,

1194N/A# with the fields enclosed by brackets [] replaced by

1239N/A# your own identifying information:

1194N/A# "Portions Copyrighted [year] [name of copyright owner]"

1194N/A#

1194N/A# $Id: FederationConfig.properties,v 1.21 2010/01/08 22:41:28 exu Exp $

1239N/A#

1194N/A

1195N/A

1195N/A# If a component wants to use a different datastore provider than the

1194N/A# default one defined above, it can define a property like follows:

1194N/A# com.sun.identity.plugin.datastore.class.<componentName>=<provider class>

1194N/A

1194N/A# com.sun.identity.plugin.configuration.class specifies implementation for

1194N/A# com.sun.identity.plugin.configuration.ConfigurationInstance interface.

1194N/Acom.sun.identity.plugin.configuration.class=@CONFIGURATION_PROVIDER_CLASS@

1194N/A

1194N/A

1194N/A# Specifies implementation for

1194N/A# com.sun.identity.plugin.datastore.DataStoreProvider interface.

1194N/A# This property defines the default datastore provider.

1194N/Acom.sun.identity.plugin.datastore.class.default=@DATASTORE_PROVIDER_CLASS@

1194N/A

1194N/A# com.sun.identity.plugin.log.class specifies implementation for

1194N/A# com.sun.identity.plugin.log.Logger interface.

1194N/Acom.sun.identity.plugin.log.class=@LOG_PROVIDER_CLASS@

1194N/A

1327N/A

1327N/A# com.sun.identity.plugin.session.class specifies implementation for

1327N/A# com.sun.identity.plugin.session.SessionProvider interface.

1327N/Acom.sun.identity.plugin.session.class=@SESSION_PROVIDER_CLASS@

1327N/A

1327N/A# com.sun.identity.plugin.monitoring.agent.class specifies implementation for

1239N/A# com.sun.identity.plugin.monitoring.FedMonAgent interface.

1194N/Acom.sun.identity.plugin.monitoring.agent.class=@MONAGENT_PROVIDER_CLASS@

1239N/A

1194N/A# com.sun.identity.plugin.monitoring.saml1.class specifies implementation for

1327N/A# com.sun.identity.plugin.monitoring.FedMonSAML1Svc interface.

1327N/Acom.sun.identity.plugin.monitoring.saml1.class=@MONSAML1_PROVIDER_CLASS@

1461N/A

1461N/A# com.sun.identity.plugin.monitoring.saml2.class specifies implementation for

1461N/A# com.sun.identity.plugin.monitoring.FedMonSAML2Svc interface.

1461N/Acom.sun.identity.plugin.monitoring.saml2.class=@MONSAML2_PROVIDER_CLASS@

1461N/A

1461N/A# com.sun.identity.plugin.monitoring.idff.class specifies implementation for

1194N/A# com.sun.identity.plugin.monitoring.FedMonIDFFSvc interface.

1194N/Acom.sun.identity.plugin.monitoring.idff.class=@MONIDFF_PROVIDER_CLASS@

1194N/A

1194N/A# com.sun.identity.saml.xmlsig.keyprovider.class specified the implementation

1327N/A# class for com.sun.identity.saml.xmlsig.KeyProvider interface

1327N/Acom.sun.identity.saml.xmlsig.keyprovider.class=@XMLSIG_KEY_PROVIDER@

1327N/A

1327N/A# com.sun.identity.saml.xmlsig.signatureprovider.class specified the

1327N/A# implementation class for com.sun.identity.saml.xmlsig.SignatureProvider

1327N/A# interface

1195N/Acom.sun.identity.saml.xmlsig.signatureprovider.class=@XML_SIGNATURE_PROVIDER@

1195N/A

1195N/Acom.sun.identity.common.serverMode=true

1195N/A

1327N/Acom.iplanet.am.server.protocol=@SERVER_PROTO@

1327N/Acom.iplanet.am.server.host=@SERVER_HOST@

1195N/Acom.iplanet.am.server.port=@SERVER_PORT@

1195N/Acom.iplanet.am.services.deploymentDescriptor=/@SERVER_URI@

1195N/Acom.iplanet.am.logstatus=ACTIVE

1195N/A

1327N/A

1327N/A# Name of the webcontainer.

1327N/A# Even though the servlet/JSP are web container independent,

1327N/A# Access/Federation Manager uses servlet 2.3 API request.setCharacterEncoding()

1327N/A# to decode incoming non English characters. These APIs will not work if

1327N/A# Access/Federation Manager is deployed on Sun Java System Web Server 6.1.

1195N/A# We use gx_charset mechanism to correctly decode incoming data in

1195N/A# Sun Java System Web Server 6.1 and S1AS7.0. Possible values

1195N/A# are BEA6.1, BEA 8.1, IBM5.1 or IAS7.0.

1195N/A# If the web container is Sun Java System Webserver, the tag is not replaced.

1327N/Acom.sun.identity.webcontainer=WEB_CONTAINER

1327N/A

1195N/A

1195N/A# Identify saml xml signature keystore file, keystore password file

1195N/A# key password file

1194N/Acom.sun.identity.saml.xmlsig.keystore=%BASE_DIR%/keystore.jks

com.sun.identity.saml.xmlsig.storepass=%BASE_DIR%/.storepass

com.sun.identity.saml.xmlsig.keypass=%BASE_DIR%/.keypass

com.sun.identity.saml.xmlsig.certalias=test

# Type of KeyStore used for saml xml signature. Default is JKS.

#

# com.sun.identity.saml.xmlsig.storetype=JKS

# Specifies the implementation class for

# com.sun.identity.saml.xmlsig.PasswordDecoder interface.

com.sun.identity.saml.xmlsig.passwordDecoder=@PASSWORD_DECODER_CLASS@

# The following key is used to specify the maximum content-length

# for an HttpRequest that will be accepted by the OpenSSO

# The default value is 16384 which is 16k

com.iplanet.services.comm.server.pllrequest.maxContentLength=16384

# The following keys are used to configure the Debug service.

# Possible values for the key 'level' are: off | error | warning | message.

# The key 'directory' specifies the output directory where the debug files

# will be created.

# Trailing spaces are significant.

# Windows: Use forward slashes "/" separate directories, not backslash "\".

# Windows: Spaces in the file name are allowed for Windows.

#

com.iplanet.services.debug.level=message

com.iplanet.services.debug.directory=%BASE_DIR%%SERVER_URI%/debug

# The following keys are used to configure the Stats service.

# Possible values for the key 'level' are: off | file | console

# Stats state 'file' will write to a file under the specified directory,

# and 'console' will write into webserver log files

# The key 'directory' specifies the output directory where the debug files

# will be created.

# Trailing spaces are significant.

# Windows: Use forward slashes "/" separate directories, not backslash "\".

# Windows: Spaces in the file name are allowed for Windows.

# Stats interval should be atleast 5 secs to avoid CPU saturation,

# the product would assume any thing less than 5 secs is 5 secs.

com.iplanet.am.stats.interval=60

com.iplanet.services.stats.state=file

com.iplanet.services.stats.directory=%BASE_DIR%%SERVER_URI%/stats

# The key that will be used to encrypt and decrypt passwords.

am.encryption.pwd=@AM_ENC_PWD@

# SecureRandom Properties: The key

# "com.iplanet.security.SecureRandomFactoryImpl"

# specifies the factory class name for SecureRandomFactory

# Available impl classes are:

# com.iplanet.am.util.JSSSecureRandomFactoryImpl (uses JSS)

# com.iplanet.am.util.SecureRandomFactoryImpl (pure Java)

com.iplanet.security.SecureRandomFactoryImpl=com.iplanet.am.util.SecureRandomFactoryImpl

# SocketFactory properties: The key "com.iplanet.security.SSLSocketFactoryImpl"

# specifies the factory class name for LDAPSocketFactory

# Available classes are:

# com.iplanet.services.ldap.JSSSocketFactory (uses JSS)

# com.sun.identity.shared.ldap.factory.JSSESocketFactory (pure Java)

com.iplanet.security.SSLSocketFactoryImpl=com.sun.identity.shared.ldap.factory.JSSESocketFactory

# Encryption: The key "com.iplanet.security.encryptor" specifies

# the encrypting class implementation.

# Available classes are:

# com.iplanet.services.util.JCEEncryption

# com.iplanet.services.util.JSSEncryption

com.iplanet.security.encryptor=com.iplanet.services.util.JCEEncryption

# Determines if JSS will be added with highest priority to JCE

# Set this to "true" if other JCE providers should be used for

# digial signatures and encryptions.

com.sun.identity.jss.donotInstallAtHighestPriority=true

# Configuration File (serverconfig.xml) Location

com.iplanet.services.configpath=@BASE_DIR@