0N/A<?xml version="1.0" encoding="ISO-8859-1"?>

2362N/A

0N/A<!DOCTYPE ServicesConfiguration

0N/A PUBLIC "=//iplanet//Service Management Services (SMS) 1.0 DTD//EN"

0N/A "jar://com/sun/identity/sm/sms.dtd">

0N/A

0N/A

0N/A<ServicesConfiguration>

0N/A <Service name="sunIdentityRepositoryService" version="1.0">

0N/A <Schema

0N/A i18nFileName="amIdRepoService"

0N/A revisionNumber="30"

0N/A i18nKey="">

0N/A

0N/A <Global>

0N/A <AttributeSchema name="coexistenceMode"

0N/A type="single" syntax="string">

0N/A <DefaultValues><Value>@AM_COEXIST@</Value></DefaultValues>

0N/A </AttributeSchema>

0N/A <AttributeSchema name="realmMode"

0N/A type="single" syntax="string">

0N/A <DefaultValues><Value>@AM_REALM@</Value></DefaultValues>

0N/A </AttributeSchema>

0N/A <AttributeSchema name="serviceNamesForAutoAssignment"

0N/A type="list"

0N/A syntax="string">

0N/A <DefaultValues>

0N/A <Value>sunIdentityRepositoryService</Value>

0N/A <Value>iPlanetAMAuthService</Value>

0N/A <Value>iPlanetAMAuthLDAPService</Value>

0N/A <Value>iPlanetAMAuthConfiguration</Value>

0N/A <Value>iPlanetAMPolicyConfigService</Value>

0N/A <!-- Delegation Service added to manage delegation

0N/A <Value>sunAMDelegationService</Value>

0N/A </DefaultValues>

0N/A </AttributeSchema>

0N/A <SubSchema name="SupportedIdentities"

0N/A inheritance="multiple" >

0N/A <AttributeSchema name="servicename">

0N/A </AttributeSchema>

0N/A <AttributeSchema name="canBeMemberOf">

0N/A </AttributeSchema>

0N/A <AttributeSchema name="canHaveMembers">

0N/A </AttributeSchema>

0N/A <AttributeSchema name="canAddMembers">

0N/A </AttributeSchema>

0N/A </SubSchema>

0N/A <SubSchema name="users" i18nKey="users">

0N/A <SubSchema name="user" inheritance="multiple"

0N/A i18nKey="user">

0N/A <AttributeSchema name="userPassword"

0N/A type="single" syntax="password"

0N/A i18nKey="password" />

0N/A <AttributeSchema name="inetUserStatus"

0N/A type="single" syntax="string"

0N/A i18nKey="staturs">

0N/A <DefaultValues><Value>Active</Value></DefaultValues>

0N/A </AttributeSchema>

0N/A <AttributeSchema name="dn"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="dn" />

0N/A <AttributeSchema name="sn"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="sn" />

0N/A <AttributeSchema name="cn"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="cn" />

0N/A <AttributeSchema name="employeeNumber"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="employeeNumber" />

0N/A <AttributeSchema name="givenName"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="givenName" />

0N/A <AttributeSchema name="iplanet-am-user-alias-list"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="iplanet-am-user-alias-list" />

0N/A <AttributeSchema name="iplanet-am-user-success-url"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="iplanet-am-user-success-url" />

0N/A <AttributeSchema name="iplanet-am-user-failure-url"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="iplanet-am-user-failure-url" />

0N/A <AttributeSchema name="mail"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="mail" />

0N/A <AttributeSchema name="postalAddress"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="postalAddress" />

0N/A <AttributeSchema name="sunIdentityMSISDNNumber"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="sunIdentityMSISDNNumber" />

0N/A <AttributeSchema name="telephoneNumber"

0N/A type="single"

0N/A isSearchable="yes"

0N/A i18nKey="telephoneNumber" />

0N/A <AttributeSchema name="roles" i18nKey="roles" />

0N/A </SubSchema>

</SubSchema>

</Global>

<Organization>

<AttributeSchema name="sunIdRepoAttributeCombiner"

type = "single"

syntax = "string"

i18nKey = "a100">

<DefaultValues>

<!-- The plugin class will combine the

<Value>com.iplanet.am.sdk.AttributeCombiner</Value>

</DefaultValues>

</AttributeSchema>

<!-- The following attribute defines the attribute mappings

<AttributeSchema name="sunCoexistenceAttributeMapping"

type = "list"

syntax = "string"

i18nKey = "a1001">

<DefaultValues>

<Value>sunOrganizationStatus=inetDomainStatus</Value>

<Value>sunOrganizationAliases=sunOrganizationAlias</Value>

<Value>sunPreferredDomain=sunPreferredDomain</Value>

<Value>sunDNSAliases=associatedDomain</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sunIdRepoAttributeValidator"

type = "list"

syntax = "string"

i18nKey = "a1002">

<DefaultValues>

<Value>class=com.sun.identity.idm.server.IdRepoAttributeValidatorImpl</Value>

<Value>minimumPasswordLength=8</Value>

</DefaultValues>

</AttributeSchema>

<!-- LDAPv3 plugin original 70 (generic ds) -->

<SubSchema name= "LDAPv3"

inheritance = "multiple"

i18nKey = "">

<AttributeSchema name="RequiredValueValidator"

type="validator"

syntax="string">

<DefaultValues>

<Value>com.sun.identity.sm.RequiredValueValidator</Value>

</DefaultValues>

</AttributeSchema>

<!-- The two attributes below, if defined, allow the IdRepo SDK to

<AttributeSchema name="sunIdRepoClass"

type = "single"

syntax = "string"

any="required"

validator="RequiredValueValidator"

i18nKey = "a2013">

<DefaultValues>

<Value>com.sun.identity.idm.plugins.ldapv3.LDAPv3Repo</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sunIdRepoAttributeMapping"

type="list"

syntax="string"

i18nKey="a20131">

</AttributeSchema>

<AttributeSchema name="sunIdRepoSupportedOperations"

type="list"

syntax="string"

validator="validatatorClass for verifying this list against supported list"

i18nKey="a2014">

<DefaultValues>

<!-- IdRepos can provide the object types

<Value>realm=read,create,edit,delete,service</Value>

<Value>user=read,create,edit,delete,service</Value>

<Value>group=read,create,edit,delete</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-ldapv3Generic"

type="single"

syntax="string"

i18nKey="">

<DefaultValues>

<Value>ldapv3Generic</Value>

</DefaultValues>

</AttributeSchema>

<!-- From here on the list of plugin specific attributes for determing

<AttributeSchema name="sun-idrepo-ldapv3-config-ldap-server"

type="list"

syntax="string"

any="required"

validator="RequiredValueValidator"

i18nKey="a2000">

<DefaultValues>

<Value>@DIRECTORY_SERVER@:@DIRECTORY_PORT@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-authid"

type="single"

syntax="string"

i18nKey="a2003">

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-authpw"

type="single"

syntax="password"

i18nKey="a2004">

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-organization_name"

type = "single"

syntax = "string"

any="required"

validator="RequiredValueValidator"

i18nKey = "a2006">

<DefaultValues>

<Value>@NORMALIZED_ORGBASE@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-ssl-enabled"

type="single"

syntax="boolean"

i18nKey="a2007">

<DefaultValues>

<Value>false</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-connection_pool_min_size"

type="single"

syntax="number"

i18nKey="a2008">

<DefaultValues>

<Value>1</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-connection_pool_max_size"

type="single"

syntax="number"

i18nKey="a2009">

<DefaultValues>

<Value>10</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-max-result"

type="single"

syntax="number"

i18nKey="a2010">

<DefaultValues>

<Value>1000</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-time-limit"

type="single"

syntax="number"

i18nKey="a2011">

<DefaultValues>

<Value>10</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-referrals"

type="single"

syntax="boolean"

i18nKey="a2012">

<DefaultValues>

<Value>true</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-search-scope"

type="single_choice"

syntax="string"

i18nKey="a2014a">

<ChoiceValues>

<ChoiceValue i18nKey="a2040">SCOPE_BASE</ChoiceValue>

<ChoiceValue i18nKey="a2041">SCOPE_ONE</ChoiceValue>

<ChoiceValue i18nKey="a2042">SCOPE_SUB</ChoiceValue>

</ChoiceValues>

<DefaultValues>

<Value>SCOPE_SUB</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-users-search-attribute"

type="single"

syntax="string"

i18nKey="a2015">

<DefaultValues>

<Value>@USER_NAMING_ATTR@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-users-search-filter"

type="single"

syntax="string"

i18nKey="a2016">

<DefaultValues>

<Value>(objectclass=inetorgperson)</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-user-objectclass"

type="list"

syntax="string"

i18nKey="a2017">

<DefaultValues>

<Value>organizationalPerson</Value>

<Value>inetorgperson</Value>

<Value>person</Value>

<Value>top</Value>

<Value>inetUser</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-user-attributes"

type="list"

syntax="string"

i18nKey="a20171">

<DefaultValues>

<Value>adminRole</Value>

<Value>authorityRevocationList</Value>

<Value>caCertificate</Value>

<Value>cn</Value>

<Value>distinguishedName</Value>

<Value>dn</Value>

<Value>employeeNumber</Value>

<Value>givenName</Value>

<Value>inetUserStatus</Value>

<Value>mail</Value>

<Value>manager</Value>

<Value>memberOf</Value>

<Value>objectClass</Value>

<Value>postalAddress</Value>

<Value>preferredlanguage</Value>

<Value>sn</Value>

<Value>telephoneNumber</Value>

<Value>uid</Value>

<Value>userPassword</Value>

<Value>userCertificate</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-createuser-attr-mapping"

type="list"

syntax="string"

i18nKey="a201711">

<DefaultValues>

<Value>cn</Value>

<Value>sn</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-isactive"

type="single"

syntax="string"

i18nKey="a20172">

<DefaultValues>

<Value>inetuserstatus</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-active"

type="single"

syntax="string"

i18nKey="a20173">

<DefaultValues>

<Value>Active</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-inactive"

type="single"

syntax="string"

i18nKey="a20174">

<DefaultValues>

<Value>Inactive</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-groups-search-attribute"

type="single"

syntax="string"

i18nKey="a2018">

<DefaultValues>

<Value>cn</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-groups-search-filter"

type="single"

syntax="string"

i18nKey="a2019">

<DefaultValues>

<Value>(objectclass=groupOfUniqueNames)</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-group-container-name"

type="single"

syntax="string"

i18nKey="a2020">

<DefaultValues>

<Value>ou</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-group-container-value"

type="single"

syntax="string"

i18nKey="a2021">

<DefaultValues>

<Value>groups</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-group-objectclass"

type="list"

syntax="string"

i18nKey="a2022">

<DefaultValues>

<Value>groupofuniquenames</Value>

<Value>top</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-group-attributes"

type="list"

syntax="string"

i18nKey="a20221">

<DefaultValues>

<Value>cn</Value>

<Value>description</Value>

<Value>dn</Value>

<Value>objectclass</Value>

<Value>ou</Value>

<Value>uniqueMember</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-memberof"

type="single"

syntax="string"

i18nKey="a2023">

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-uniquemember"

type="single"

syntax="string"

i18nKey="a2024">

<DefaultValues>

<Value>uniqueMember</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-memberurl"

type="single"

syntax="string"

i18nKey="a2025">

<DefaultValues>

<Value>memberUrl</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-dftgroupmember"

type="single"

syntax="string"

i18nKey="a20251">

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-roles-search-attribute"

type="single"

syntax="string"

i18nKey="">

<DefaultValues>

<Value>cn</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-roles-search-filter"

type="single"

syntax="string"

i18nKey="">

<DefaultValues>

<Value>(&amp;(objectclass=ldapsubentry)(objectclass=nsmanagedroledefinition))</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-role-search-scope"

type="single_choice"

syntax="string"

i18nKey="">

<ChoiceValues>

<ChoiceValue i18nKey="a2040">SCOPE_BASE</ChoiceValue>

<ChoiceValue i18nKey="a2041">SCOPE_ONE</ChoiceValue>

<ChoiceValue i18nKey="a2042">SCOPE_SUB</ChoiceValue>

</ChoiceValues>

<DefaultValues>

<Value>SCOPE_SUB</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-role-objectclass"

type="list"

syntax="string"

i18nKey="">

<DefaultValues>

<Value>ldapsubentry</Value>

<Value>nsmanagedroledefinition</Value>

<Value>nsroledefinition</Value>

<Value>nssimpleroledefinition</Value>

<Value>top</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-filterrole-objectclass"

type="list"

syntax="string"

i18nKey="">

<DefaultValues>

<Value>ldapsubentry</Value>

<Value>nscomplexroledefinition</Value>

<Value>nsfilteredroledefinition</Value>

<Value>nsroledefinition</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-filterrole-attributes"

type="list"

syntax="string"

i18nKey="">

<DefaultValues>

<Value>nsRoleFilter</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-nsrole"

type="single"

syntax="string"

i18nKey="">

<DefaultValues>

<Value>nsrole</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-nsroledn"

type="single"

syntax="string"

i18nKey="">

<DefaultValues>

<Value>nsRoleDN</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-nsrolefilter"

type="single"

syntax="string"

i18nKey="">

<DefaultValues>

<Value>nsRoleFilter</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-people-container-name"

type="single"

syntax="string"

i18nKey="a2034">

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-people-container-value"

type="single"

syntax="string"

i18nKey="a2035">

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-authenticatable-type"

type="multiple_choice"

syntax="string"

i18nKey="a20385">

<ChoiceValues>

<ChoiceValue i18nKey="choiceUSER">User</ChoiceValue>

</ChoiceValues>

<DefaultValues>

<Value>User</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-auth-naming-attr"

type="single"

syntax="string"

i18nKey="a20386">

<DefaultValues>

<Value>@USER_NAMING_ATTR@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-psearchbase"

type="single"

syntax="string"

i18nKey="a2043">

<DefaultValues>

<Value>@NORMALIZED_ORGBASE@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-psearch-filter"

type="single"

syntax="string"

i18nKey="a20431">

<DefaultValues>

<Value>(objectclass=*)</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-psearch-scope"

type="single_choice"

syntax="string"

i18nKey="a20432">

<ChoiceValues>

<ChoiceValue i18nKey="a2040">SCOPE_BASE</ChoiceValue>

<ChoiceValue i18nKey="a2041">SCOPE_ONE</ChoiceValue>

<ChoiceValue i18nKey="a2042">SCOPE_SUB</ChoiceValue>

</ChoiceValues>

<DefaultValues>

<Value>SCOPE_SUB</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-idletimeout"

type="single"

syntax="number"

i18nKey="a2044">

<DefaultValues>

<Value>0</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-numretires"

type="single"

syntax="number"

i18nKey="a2045">

<DefaultValues>

<Value>3</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="com.iplanet.am.ldap.connection.delay.between.retries"

type="single"

syntax="number"

i18nKey="a2046">

<DefaultValues>

<Value>1000</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-errorcodes"

type="list"

syntax="string"

i18nKey="a2047">

<DefaultValues>

<Value>80</Value>

<Value>81</Value>

<Value>91</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-cache-enabled"

type="single"

syntax="boolean"

i18nKey="a2048">

<DefaultValues>

<Value>false</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-cache-ttl"

type="single"

syntax="number"

i18nKey="a2049">

<DefaultValues>

<Value>600</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-cache-size"

type="single"

syntax="number"

i18nKey="a2050">

<DefaultValues>

<Value>10240</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-service-attributes"

type="list"

syntax="xml"

i18nKey="">

</AttributeSchema>

</SubSchema>

<!-- LDAPv3 plugin for sun ds with AM-->

<SubSchema name= "LDAPv3ForAMDS"

inheritance = "multiple"

i18nKey = "a2052">

<AttributeSchema name="RequiredValueValidator"

type="validator"

syntax="string">

<DefaultValues>

<Value>com.sun.identity.sm.RequiredValueValidator</Value>

</DefaultValues>

</AttributeSchema>

<!-- The two attributes below, if defined, allow the IdRepo SDK to

<AttributeSchema name="sunIdRepoClass"

type = "single"

syntax = "string"

any="required"

validator="RequiredValueValidator"

i18nKey = "a2013">

<DefaultValues>

<Value>com.sun.identity.idm.plugins.ldapv3.LDAPv3Repo</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sunIdRepoAttributeMapping"

type="list"

syntax="string"

i18nKey="a20131">

</AttributeSchema>

<AttributeSchema name="sunIdRepoSupportedOperations"

type="list"

syntax="string"

validator="validatatorClass for verifying this list against supported list"

i18nKey="a2014">

<DefaultValues>

<!-- IdRepos can provide the object types

<Value>realm=read,create,edit,delete,service</Value>

<Value>user=read,create,edit,delete,service</Value>

<Value>group=read,create,edit,delete</Value>

<Value>role=read,create,edit,delete</Value>

<Value>filteredrole=read,create,edit,delete</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-ldapv3AMDS"

type="single"

syntax="string"

i18nKey="">

<DefaultValues>

<Value>ldapv3AMDS</Value>

</DefaultValues>

</AttributeSchema>

<!-- From here on the list of plugin specific attributes for determing

<AttributeSchema name="sun-idrepo-ldapv3-config-ldap-server"

type="list"

syntax="string"

any="required"

validator="RequiredValueValidator"

i18nKey="a2000">

<DefaultValues>

<Value>@DIRECTORY_SERVER@:@DIRECTORY_PORT@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-authid"

type="single"

syntax="string"

i18nKey="a2003">

<DefaultValues>

<Value>cn=dsameuser,ou=DSAME Users,@NORMALIZED_ORGBASE@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-authpw"

type="single"

syntax="password"

i18nKey="a2004">

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-organization_name"

type = "single"

syntax = "string"

any="required"

validator="RequiredValueValidator"

i18nKey = "a2006">

<DefaultValues>

<Value>@NORMALIZED_ORGBASE@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-ssl-enabled"

type="single"

syntax="boolean"

i18nKey="a2007">

<DefaultValues>

<Value>false</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-connection_pool_min_size"

type="single"

syntax="number"

i18nKey="a2008">

<DefaultValues>

<Value>1</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-connection_pool_max_size"

type="single"

syntax="number"

i18nKey="a2009">

<DefaultValues>

<Value>10</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-max-result"

type="single"

syntax="number"

i18nKey="a2010">

<DefaultValues>

<Value>1000</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-time-limit"

type="single"

syntax="number"

i18nKey="a2011">

<DefaultValues>

<Value>10</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-referrals"

type="single"

syntax="boolean"

i18nKey="a2012">

<DefaultValues>

<Value>true</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-search-scope"

type="single_choice"

syntax="string"

i18nKey="a2014a">

<ChoiceValues>

<ChoiceValue i18nKey="a2040">SCOPE_BASE</ChoiceValue>

<ChoiceValue i18nKey="a2041">SCOPE_ONE</ChoiceValue>

<ChoiceValue i18nKey="a2042">SCOPE_SUB</ChoiceValue>

</ChoiceValues>

<DefaultValues>

<Value>SCOPE_SUB</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-users-search-attribute"

type="single"

syntax="string"

i18nKey="a2015">

<DefaultValues>

<Value>@USER_NAMING_ATTR@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-users-search-filter"

type="single"

syntax="string"

i18nKey="a2016">

<DefaultValues>

<Value>(objectclass=inetorgperson)</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-user-objectclass"

type="list"

syntax="string"

i18nKey="a2017">

<DefaultValues>

<Value>inetadmin</Value>

<Value>inetorgperson</Value>

<Value>inetuser</Value>

<Value>iplanet-am-auth-configuration-service</Value>

<Value>iplanet-am-managed-person</Value>

<Value>iplanet-am-user-service</Value>

<Value>iPlanetPreferences</Value>

<Value>organizationalperson</Value>

<Value>person</Value>

<Value>sunAMAuthAccountLockout</Value>

<Value>top</Value>

<Value>sunFederationManagerDataStore</Value>

<Value>sunIdentityServerLibertyPPService</Value>

<Value>sunFMSAML2NameIdentifier</Value>

<Value>forgerock-am-dashboard-service</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-user-attributes"

type="list"

syntax="string"

i18nKey="a20171">

<DefaultValues>

<Value>adminRole</Value>

<Value>authorityRevocationList</Value>

<Value>caCertificate</Value>

<Value>cn</Value>

<Value>distinguishedName</Value>

<Value>dn</Value>

<Value>employeeNumber</Value>

<Value>givenName</Value>

<Value>inetUserHttpURL</Value>

<Value>inetUserStatus</Value>

<Value>iplanet-am-auth-configuration</Value>

<Value>iplanet-am-user-auth-modules</Value>

<Value>iplanet-am-session-add-session-listener-on-all-sessions</Value>

<Value>iplanet-am-session-destroy-sessions</Value>

<Value>iplanet-am-session-get-valid-sessions</Value>

<Value>iplanet-am-session-max-caching-time</Value>

<Value>iplanet-am-session-max-idle-time</Value>

<Value>iplanet-am-session-max-session-time</Value>

<Value>iplanet-am-session-quota-limit</Value>

<Value>iplanet-am-session-service-status</Value>

<Value>iplanet-am-user-admin-start-dn</Value>

<Value>iplanet-am-user-account-life</Value>

<Value>iplanet-am-user-alias-list</Value>

<Value>iplanet-am-user-auth-config</Value>

<Value>iplanet-am-user-failure-url</Value>

<Value>iplanet-am-user-login-status</Value>

<Value>iplanet-am-user-password-reset-force-reset</Value>

<Value>iplanet-am-user-password-reset-options</Value>

<Value>iplanet-am-user-password-reset-question-answer</Value>

<Value>iplanet-am-user-success-url</Value>

<Value>iplanet-am-static-group-dn</Value>

<Value>mail</Value>

<Value>manager</Value>

<Value>memberOf</Value>

<Value>objectClass</Value>

<Value>postalAddress</Value>

<Value>preferredlanguage</Value>

<Value>preferredLocale</Value>

<Value>preferredtimezone</Value>

<Value>sn</Value>

<Value>sunAMAuthInvalidAttemptsData</Value>

<Value>sunIdentityMSISDNNumber</Value>

<Value>telephoneNumber</Value>

<Value>uid</Value>

<Value>userPassword</Value>

<Value>userCertificate</Value>

<Value>iplanet-am-user-federation-info-key</Value>

<Value>iplanet-am-user-federation-info</Value>

<Value>sunIdentityServerDiscoEntries</Value>

<Value>sunIdentityServerPPCommonNameCN</Value>

<Value>sunIdentityServerPPCommonNameFN</Value>

<Value>sunIdentityServerPPCommonNameSN</Value>

<Value>sunIdentityServerPPCommonNameMN</Value>

<Value>sunIdentityServerPPCommonNameAltCN</Value>

<Value>sunIdentityServerPPCommonNamePT</Value>

<Value>sunIdentityServerPPInformalName</Value>

<Value>sunIdentityServerPPLegalIdentityLegalName</Value>

<Value>sunIdentityServerPPLegalIdentityDOB</Value>

<Value>sunIdentityServerPPLegalIdentityMaritalStatus</Value>

<Value>sunIdentityServerPPLegalIdentityGender</Value>

<Value>sunIdentityServerPPLegalIdentityAltIdType</Value>

<Value>sunIdentityServerPPLegalIdentityAltIdValue</Value>

<Value>sunIdentityServerPPLegalIdentityVATIdType</Value>

<Value>sunIdentityServerPPLegalIdentityVATIdValue</Value>

<Value>sunIdentityServerPPEmploymentIdentityJobTitle</Value>

<Value>sunIdentityServerPPEmploymentIdentityOrg</Value>

<Value>sunIdentityServerPPEmploymentIdentityAltO</Value>

<Value>sunIdentityServerPPAddressCard</Value>

<Value>sunIdentityServerPPMsgContact</Value>

<Value>sunIdentityServerPPFacadeMugShot</Value>

<Value>sunIdentityServerPPFacadeWebSite</Value>

<Value>sunIdentityServerPPFacadeNamePronounced</Value>

<Value>sunIdentityServerPPFacadeGreetSound</Value>

<Value>sunIdentityServerPPFacadegreetmesound</Value>

<Value>sunIdentityServerPPDemographicsDisplayLanguage</Value>

<Value>sunIdentityServerPPDemographicsLanguage</Value>

<Value>sunIdentityServerPPDemographicsAge</Value>

<Value>sunIdentityServerPPDemographicsBirthDay</Value>

<Value>sunIdentityServerPPDemographicsTimeZone</Value>

<Value>sunIdentityServerPPSignKey</Value>

<Value>sunIdentityServerPPEncryPTKey</Value>

<Value>sunIdentityServerPPEmergencyContact</Value>

<Value>sun-fm-saml2-nameid-infokey</Value>

<Value>sun-fm-saml2-nameid-info</Value>

<Value>assignedDashboard</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-createuser-attr-mapping"

type="list"

syntax="string"

i18nKey="a201711">

<DefaultValues>

<Value>cn</Value>

<Value>sn</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-isactive"

type="single"

syntax="string"

i18nKey="a20172">

<DefaultValues>

<Value>inetuserstatus</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-active"

type="single"

syntax="string"

i18nKey="a20173">

<DefaultValues>

<Value>Active</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-inactive"

type="single"

syntax="string"

i18nKey="a20174">

<DefaultValues>

<Value>Inactive</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-groups-search-attribute"

type="single"

syntax="string"

i18nKey="a2018">

<DefaultValues>

<Value>cn</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-groups-search-filter"

type="single"

syntax="string"

i18nKey="a2019">

<DefaultValues>

<Value>(objectclass=groupOfUniqueNames)</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-group-container-name"

type="single"

syntax="string"

i18nKey="a2020">

<DefaultValues>

<Value>ou</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-group-container-value"

type="single"

syntax="string"

i18nKey="a2021">

<DefaultValues>

<Value>groups</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-group-objectclass"

type="list"

syntax="string"

i18nKey="a2022">

<DefaultValues>

<Value>groupofuniquenames</Value>

<Value>groupofurls</Value>

<Value>iplanet-am-managed-static-group</Value>

<Value>iplanet-am-managed-group</Value>

<Value>top</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-group-attributes"

type="list"

syntax="string"

i18nKey="a20221">

<DefaultValues>

<Value>cn</Value>

<Value>dn</Value>

<Value>iplanet-am-group-subscribable</Value>

<Value>objectclass</Value>

<Value>uniqueMember</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-memberof"

type="single"

syntax="string"

i18nKey="a2023">

<DefaultValues>

<Value>iplanet-am-static-group-dn</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-uniquemember"

type="single"

syntax="string"

i18nKey="a2024">

<DefaultValues>

<Value>uniqueMember</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-memberurl"

type="single"

syntax="string"

i18nKey="a2025">

<DefaultValues>

<Value>memberUrl</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-roles-search-attribute"

type="single"

syntax="string"

i18nKey="a2026">

<DefaultValues>

<Value>cn</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-roles-search-filter"

type="single"

syntax="string"

i18nKey="a2027">

<DefaultValues>

<Value>(&amp;(objectclass=ldapsubentry)(objectclass=nsmanagedroledefinition))</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-role-search-scope"

type="single_choice"

syntax="string"

i18nKey="">

<ChoiceValues>

<ChoiceValue i18nKey="a2040">SCOPE_BASE</ChoiceValue>

<ChoiceValue i18nKey="a2041">SCOPE_ONE</ChoiceValue>

<ChoiceValue i18nKey="a2042">SCOPE_SUB</ChoiceValue>

</ChoiceValues>

<DefaultValues>

<Value>SCOPE_SUB</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-role-objectclass"

type="list"

syntax="string"

i18nKey="a2029">

<DefaultValues>

<Value>ldapsubentry</Value>

<Value>nsmanagedroledefinition</Value>

<Value>nsroledefinition</Value>

<Value>nssimpleroledefinition</Value>

<Value>top</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-role-attributes"

type="list"

syntax="string"

i18nKey="a202902">

<DefaultValues>

<Value></Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-filterroles-search-attribute"

type="single"

syntax="string"

i18nKey="a202904">

<DefaultValues>

<Value>cn</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-filterroles-search-filter"

type="single"

syntax="string"

i18nKey="a202905">

<DefaultValues>

<Value>(&amp;(objectclass=ldapsubentry)(objectclass=nsfilteredroledefinition))</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-filterrole-objectclass"

type="list"

syntax="string"

i18nKey="a20291">

<DefaultValues>

<Value>ldapsubentry</Value>

<Value>nscomplexroledefinition</Value>

<Value>nsfilteredroledefinition</Value>

<Value>nsroledefinition</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-filterrole-attributes"

type="list"

syntax="string"

i18nKey="a20292">

<DefaultValues>

<Value>nsRoleFilter</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-nsrole"

type="single"

syntax="string"

i18nKey="a2030">

<DefaultValues>

<Value>nsrole</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-nsroledn"

type="single"

syntax="string"

i18nKey="a2031">

<DefaultValues>

<Value>nsRoleDN</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-nsrolefilter"

type="single"

syntax="string"

i18nKey="a2032">

<DefaultValues>

<Value>nsRoleFilter</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-people-container-name"

type="single"

syntax="string"

i18nKey="a2034">

<DefaultValues>

<Value>ou</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-people-container-value"

type="single"

syntax="string"

i18nKey="a2035">

<DefaultValues>

<Value>people</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-authenticatable-type"

type="multiple_choice"

syntax="string"

i18nKey="a20385">

<ChoiceValues>

<ChoiceValue i18nKey="choiceUSER">User</ChoiceValue>

</ChoiceValues>

<DefaultValues>

<Value>User</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-auth-naming-attr"

type="single"

syntax="string"

i18nKey="a20386">

<DefaultValues>

<Value>@USER_NAMING_ATTR@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-psearchbase"

type="single"

syntax="string"

i18nKey="a2043">

<DefaultValues>

<Value>@NORMALIZED_ORGBASE@</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-psearch-filter"

type="single"

syntax="string"

i18nKey="a20431">

<DefaultValues>

<Value>(objectclass=*)</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-psearch-scope"

type="single_choice"

syntax="string"

i18nKey="a20432">

<ChoiceValues>

<ChoiceValue i18nKey="a2040">SCOPE_BASE</ChoiceValue>

<ChoiceValue i18nKey="a2041">SCOPE_ONE</ChoiceValue>

<ChoiceValue i18nKey="a2042">SCOPE_SUB</ChoiceValue>

</ChoiceValues>

<DefaultValues>

<Value>SCOPE_SUB</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-idletimeout"

type="single"

syntax="number"

i18nKey="a2044">

<DefaultValues>

<Value>0</Value>

</DefaultValues>

</AttributeSchema>

<AttributeSchema name="sun-idrepo-ldapv3-config-numretires"

type="single"