http://git-wip-us.apache.org/repos/asf/stratos/blob/e615fb82/tools/stratos-installer/config/is/repository/conf/axis2/axis2.xml ---------------------------------------------------------------------- diff --git a/tools/stratos-installer/config/is/repository/conf/axis2/axis2.xml b/tools/stratos-installer/config/is/repository/conf/axis2/axis2.xml deleted file mode 100644 index 2c646f9..0000000 --- a/tools/stratos-installer/config/is/repository/conf/axis2/axis2.xml +++ /dev/null @@ -1,715 +0,0 @@ -<!-- - - Licensed to the Apache Software Foundation (ASF) under one - - or more contributor license agreements. See the NOTICE file - - distributed with this work for additional information - - regarding copyright ownership. The ASF licenses this file - - to you under the Apache License, Version 2.0 (the - - "License"); you may not use this file except in compliance - - with the License. You may obtain a copy of the License at - - - - http://www.apache.org/licenses/LICENSE-2.0 - - - - Unless required by applicable law or agreed to in writing, - - software distributed under the License is distributed on an - - "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY - - KIND, either express or implied. See the License for the - - specific language governing permissions and limitations - - under the License. ---> -<axisconfig name="AxisJava2.0"> - - <!-- ================================================= --> - <!-- Globally engaged modules --> - <!-- ================================================= --> - <module ref="addressing"/> - - <!-- ================================================= --> - <!-- Parameters --> - <!-- ================================================= --> - <parameter name="hotdeployment">true</parameter> - <parameter name="hotupdate">false</parameter> - <parameter name="enableMTOM" locked="false">optional</parameter> - <parameter name="cacheAttachments">true</parameter> - <parameter name="attachmentDIR">work/mtom</parameter> - <parameter name="sizeThreshold">4000</parameter> - - <parameter name="EnableChildFirstClassLoading">${childfirstCL}</parameter> - - <!-- - The exposeServiceMetadata parameter decides whether the metadata (WSDL, schema, policy) of - the services deployed on Axis2 should be visible when ?wsdl, ?wsdl2, ?xsd, ?policy requests - are received. - This parameter can be defined in the axi2.xml file, in which case this will be applicable - globally, or in the services.xml files, in which case, it will be applicable to the - Service groups and/or services, depending on the level at which the parameter is declared. - This value of this parameter defaults to true. - --> - <parameter name="exposeServiceMetadata">true</parameter> - - <!-- - Defines how the persistence of WS-ReliableMessaging is handled - - Possible value are: inmemory & persistent - --> - <!-- Following parameter will completely disable REST handling in both the servlets--> - <parameter name="disableREST" locked="false">false</parameter> - - <parameter name="Sandesha2StorageManager">inmemory</parameter> - - <!-- This deployment interceptor will be called whenever before a module is initialized or - service is deployed --> - <listener class="org.wso2.carbon.core.deployment.DeploymentInterceptor"/> - - <!-- setting servicePath. contextRoot is defined in the carbon.xml file --> - <parameter name="servicePath">services</parameter> - - <!--the directory in which .aar services are deployed inside axis2 repository--> - <parameter name="ServicesDirectory">axis2services</parameter> - - <!--the directory in which modules are deployed inside axis2 repository--> - <parameter name="ModulesDirectory">axis2modules</parameter> - - <parameter name="userAgent" locked="true"> - WSO2 Identity Server-4.0.0 - </parameter> - <parameter name="server" locked="true"> - WSO2 Identity Server-4.0.0 - </parameter> - - <!-- ========================================================================--> - - <!--During a fault, stacktrace can be sent with the fault message. The following flag will control --> - <!--that behaviour.--> - <parameter name="sendStacktraceDetailsWithFaults">false</parameter> - - <!--If there aren't any information available to find out the fault reason, we set the message of the expcetion--> - <!--as the faultreason/Reason. But when a fault is thrown from a service or some where, it will be --> - <!--wrapped by different levels. Due to this the initial exception message can be lost. If this flag--> - <!--is set then, Axis2 tries to get the first exception and set its message as the faultreason/Reason.--> - <parameter name="DrillDownToRootCauseForFaultReason">false</parameter> - - <!--Set the flag to true if you want to enable transport level session mangment--> - <parameter name="manageTransportSession">true</parameter> - - <!-- Synapse Configuration file --> - <parameter name="SynapseConfig.ConfigurationFile" locked="false">./repository/deployment/server/synapse-configs</parameter> - - <!-- Synapse Home parameter --> - <parameter name="SynapseConfig.HomeDirectory" locked="false">.</parameter> - - <!-- Resolve root used to resolve synapse references like schemas inside a WSDL --> - <parameter name="SynapseConfig.ResolveRoot" locked="false">.</parameter> - - <!-- Synapse Server name parameter --> - <parameter name="SynapseConfig.ServerName" locked="false">WSO2 Carbon Server</parameter> - - <!--By default, JAXWS services are created by reading annotations. WSDL and schema are generated--> - <!--using a separate WSDL generator only when ?wsdl is called. Therefore, even if you engage--> - <!--policies etc.. to AxisService, it doesn't appear in the WSDL. By setting the following property--> - <!--to true, you can create the AxisService using the generated WSDL and remove the need for a--> - <!--WSDL generator. When ?wsdl is called, WSDL is generated in the normal way.--> - <parameter name="useGeneratedWSDLinJAXWS">${jaxwsparam}</parameter> - - <!-- Deployer for the dataservice. --> - <!--<deployer extension="dbs" directory="dataservices" class="org.wso2.dataservices.DBDeployer"/>--> - - <!-- Axis1 deployer for Axis2--> - <!--<deployer extension="wsdd" class="org.wso2.carbon.axis1services.Axis1Deployer" directory="axis1services"/>--> - - <!-- POJO service deployer for Jar --> - <!--<deployer extension="jar" class="org.apache.axis2.deployment.POJODeployer" directory="pojoservices"/>--> - - <!-- POJO service deployer for Class --> - <!--<deployer extension="class" class="org.apache.axis2.deployment.POJODeployer" directory="pojoservices"/>--> - - <!-- JAXWS service deployer --> - <!--<deployer extension=".jar" class="org.apache.axis2.jaxws.framework.JAXWSDeployer" directory="servicejars"/>--> - <!-- ================================================= --> - <!-- Message Receivers --> - <!-- ================================================= --> - <!--This is the Default Message Receiver for the system , if you want to have MessageReceivers for --> - <!--all the other MEP implement it and add the correct entry to here , so that you can refer from--> - <!--any operation --> - <!--Note : You can ovride this for particular service by adding the same element with your requirement--> - - <messageReceivers> - <messageReceiver mep="http://www.w3.org/ns/wsdl/in-only"; - class="org.apache.axis2.rpc.receivers.RPCInOnlyMessageReceiver"/> - <messageReceiver mep="http://www.w3.org/ns/wsdl/robust-in-only"; - class="org.apache.axis2.rpc.receivers.RPCInOnlyMessageReceiver"/> - <messageReceiver mep="http://www.w3.org/ns/wsdl/in-out"; - class="org.apache.axis2.rpc.receivers.RPCMessageReceiver"/> - </messageReceivers> - - <messageFormatters> - <messageFormatter contentType="application/x-www-form-urlencoded" - class="org.apache.axis2.transport.http.XFormURLEncodedFormatter"/> - <messageFormatter contentType="multipart/form-data" - class="org.apache.axis2.transport.http.MultipartFormDataFormatter"/> - <messageFormatter contentType="application/xml" - class="org.apache.axis2.transport.http.ApplicationXMLFormatter"/> - <messageFormatter contentType="text/xml" - class="org.apache.axis2.transport.http.SOAPMessageFormatter"/> - <messageFormatter contentType="application/soap+xml" - class="org.apache.axis2.transport.http.SOAPMessageFormatter"/> - - <!--JSON Message Formatters--> - <messageFormatter contentType="application/json" - class="org.apache.axis2.json.JSONMessageFormatter"/> - <messageFormatter contentType="application/json/badgerfish" - class="org.apache.axis2.json.JSONBadgerfishMessageFormatter"/> - <messageFormatter contentType="text/javascript" - class="org.apache.axis2.json.JSONMessageFormatter"/> - - <!--messageFormatter contentType="application/x-www-form-urlencoded" - class="org.wso2.carbon.relay.ExpandingMessageFormatter"/--> - <!--messageFormatter contentType="multipart/form-data" - class="org.wso2.carbon.relay.ExpandingMessageFormatter"/--> - <!--messageFormatter contentType="application/xml" - class="org.wso2.carbon.relay.ExpandingMessageFormatter"/--> - <!--messageFormatter contentType="text/html" - class="org.wso2.carbon.relay.ExpandingMessageFormatter"/--> - <!--messageFormatter contentType="application/soap+xml" - class="org.wso2.carbon.relay.ExpandingMessageFormatter"/--> - <!--messageFormatter contentType="x-application/hessian" - class="org.apache.synapse.format.hessian.HessianMessageFormatter"/--> - <!--<messageFormatter contentType=""> - class="org.apache.synapse.format.hessian.HessianMessageFormatter"/--> - </messageFormatters> - - <messageBuilders> - <messageBuilder contentType="application/xml" - class="org.apache.axis2.builder.ApplicationXMLBuilder"/> - <messageBuilder contentType="application/x-www-form-urlencoded" - class="org.apache.axis2.builder.XFormURLEncodedBuilder"/> - <messageBuilder contentType="multipart/form-data" - class="org.apache.axis2.builder.MultipartFormDataBuilder"/> - - <!--JSON Message Builders--> - <messageBuilder contentType="application/json" - class="org.apache.axis2.json.JSONOMBuilder"/> - <messageBuilder contentType="application/json/badgerfish" - class="org.apache.axis2.json.JSONBadgerfishOMBuilder"/> - <messageBuilder contentType="text/javascript" - class="org.apache.axis2.json.JSONOMBuilder"/> - - <!--messageBuilder contentType="application/xml" - class="org.wso2.carbon.relay.BinaryRelayBuilder"/--> - <!--messageBuilder contentType="application/x-www-form-urlencoded" - class="org.wso2.carbon.relay.BinaryRelayBuilder"/--> - <!--messageBuilder contentType="multipart/form-data" - class="org.wso2.carbon.relay.BinaryRelayBuilder"/--> - <!--messageBuilder contentType="multipart/related" - class="org.wso2.carbon.relay.BinaryRelayBuilder"/--> - <!--messageBuilder contentType="application/soap+xml" - class="org.wso2.carbon.relay.BinaryRelayBuilder"/--> - <!--messageBuilder contentType="text/plain" - class="org.wso2.carbon.relay.BinaryRelayBuilder"/--> - <!--messageBuilder contentType="text/xml" - class="org.wso2.carbon.relay.BinaryRelayBuilder"/--> - <!--messageFormatter contentType="text/plain" - class="org.apache.axis2.format.PlainTextBuilder"/--> - <!--messageBuilder contentType="x-application/hessian" - class="org.apache.synapse.format.hessian.HessianMessageBuilder"/--> - </messageBuilders> - - - <!-- ================================================= --> - <!-- In Transports --> - <!-- ================================================= --> - <transportReceiver name="http" - class="org.wso2.carbon.core.transports.http.HttpTransportListener"> - <!-- - Uncomment the following if you are deploying this within an application server. You - need to specify the HTTP port of the application server - --> - <parameter name="port">9763</parameter> - - <!-- - Uncomment the following to enable Apache2 mod_proxy. The port on the Apache server is 80 - in this case. - --> - <!--<parameter name="proxyPort">80</parameter>--> - </transportReceiver> - - <!--Please uncomment this in Multiple Instance Scenario if you want to use NIO Transport Recievers and - Remove the current transport REceivers in axis2.xml --> - <!--transportReceiver name="http" class="org.apache.synapse.transport.nhttp.HttpCoreNIOListener"> - <parameter name="port" locked="false">8280</parameter> - <parameter name="non-blocking" locked="false">true</parameter> - </transportReceiver> - - <transportReceiver name="https" class="org.apache.synapse.transport.nhttp.HttpCoreNIOSSLListener"> - <parameter name="port" locked="false">8243</parameter> - <parameter name="non-blocking" locked="false">true</parameter> - <parameter name="keystore" locked="false"> - <KeyStore> - <Location>repository/resources/security/wso2carbon.jks</Location> - <Type>JKS</Type> - <Password>wso2carbon</Password> - <KeyPassword>wso2carbon</KeyPassword> - </KeyStore> - </parameter> - <parameter name="truststore" locked="false"> - <TrustStore> - <Location>repository/resources/security/client-truststore.jks</Location> - <Type>JKS</Type> - <Password>wso2carbon</Password> - </TrustStore> - </parameter> - </transportReceiver--> - - - - <transportReceiver name="https" - class="org.wso2.carbon.core.transports.http.HttpsTransportListener"> - <!-- - Uncomment the following if you are deploying this within an application server. You - need to specify the HTTPS port of the application server - --> - <parameter name="port">9443</parameter> - - <!-- - Uncomment the following to enable Apache2 mod_proxy. The port on the Apache server is 443 - in this case. - --> - <!--<parameter name="proxyPort">443</parameter>--> - </transportReceiver> - - <!-- - Uncomment the following segment to enable TCP transport. - Note : Addressing module should be engaged for TCP transport to work - --> - <!--<transportReceiver name="tcp" - class="org.apache.axis2.transport.tcp.TCPServer"> - <parameter name="port">6667</parameter> - </transportReceiver>--> - - <!-- - To Enable Mail Transport Listener, please uncomment the following. - --> - <!--<transportReceiver name="mailto" class="org.apache.axis2.transport.mail.MailTransportListener"> - - </transportReceiver>--> - - - <!-- - Uncomment this and configure as appropriate for JMS transport support, - after setting up your JMS environment (e.g. ActiveMQ) - --> - <!--<transportReceiver name="jms" class="org.apache.axis2.transport.jms.JMSListener"> - <parameter name="myTopicConnectionFactory"> - <parameter name="java.naming.factory.initial">org.apache.activemq.jndi.ActiveMQInitialContextFactory</parameter> - <parameter name="java.naming.provider.url">tcp://localhost:61616</parameter> - <parameter name="transport.jms.ConnectionFactoryJNDIName">TopicConnectionFactory</parameter> - </parameter> - - <parameter name="myQueueConnectionFactory"> - <parameter name="java.naming.factory.initial">org.apache.activemq.jndi.ActiveMQInitialContextFactory</parameter> - <parameter name="java.naming.provider.url">tcp://localhost:61616</parameter> - <parameter name="transport.jms.ConnectionFactoryJNDIName">QueueConnectionFactory</parameter> - </parameter> - - <parameter name="default"> - <parameter name="java.naming.factory.initial">org.apache.activemq.jndi.ActiveMQInitialContextFactory</parameter> - <parameter name="java.naming.provider.url">tcp://localhost:61616</parameter> - <parameter name="transport.jms.ConnectionFactoryJNDIName">QueueConnectionFactory</parameter> - </parameter> - </transportReceiver>--> - - <!-- ================================================= --> - <!-- Out Transports --> - <!-- ================================================= --> - - <transportSender name="tcp" - class="org.apache.axis2.transport.tcp.TCPTransportSender"/> - <transportReceiver name="local" class="org.wso2.carbon.core.transports.local.CarbonLocalTransportReceiver"/> - <transportSender name="local" class="org.wso2.carbon.core.transports.local.CarbonLocalTransportSender"/> - <!--<transportSender name="jms" - class="org.apache.axis2.transport.jms.JMSSender"/>--> - <transportSender name="http" - class="org.apache.axis2.transport.http.CommonsHTTPTransportSender"> - <parameter name="PROTOCOL">HTTP/1.1</parameter> - <parameter name="Transfer-Encoding">chunked</parameter> - <!-- This parameter has been added to overcome problems encounted in SOAP action parameter --> - <parameter name="OmitSOAP12Action">true</parameter> - </transportSender> - <transportSender name="https" - class="org.apache.axis2.transport.http.CommonsHTTPTransportSender"> - <parameter name="PROTOCOL">HTTP/1.1</parameter> - <parameter name="Transfer-Encoding">chunked</parameter> - <!-- This parameter has been added to overcome problems encounted in SOAP action parameter --> - <parameter name="OmitSOAP12Action">true</parameter> - </transportSender> - - <!-- To enable mail transport sender, ncomment the following and change the parameters - accordingly--> - <!--<transportSender name="mailto" - class="org.apache.axis2.transport.mail.MailTransportSender"> - <parameter name="mail.smtp.from">[email protected]</parameter> - <parameter name="mail.smtp.user">synapse.demo.1</parameter> - <parameter name="mail.smtp.password">mailpassword</parameter> - <parameter name="mail.smtp.host">smtp.gmail.com</parameter> - - <parameter name="mail.smtp.port">587</parameter> - <parameter name="mail.smtp.starttls.enable">true</parameter> - <parameter name="mail.smtp.auth">true</parameter> - </transportSender>--> - - <!--Please uncomment this in Multiple Instance Scenario if you want to use NIO sender --> - <!-- - <transportSender name="http" class="org.apache.synapse.transport.nhttp.HttpCoreNIOSender"> - <parameter name="non-blocking" locked="false">true</parameter> - </transportSender> - <transportSender name="https" class="org.apache.synapse.transport.nhttp.HttpCoreNIOSSLSender"> - <parameter name="non-blocking" locked="false">true</parameter> - <parameter name="keystore" locked="false"> - <KeyStore> - <Location>repository/resources/security/wso2carbon.jks</Location> - <Type>JKS</Type> - <Password>wso2carbon</Password> - <KeyPassword>wso2carbon</KeyPassword> - </KeyStore> - </parameter> - <parameter name="truststore" locked="false"> - <TrustStore> - <Location>repository/resources/security/client-truststore.jks</Location> - <Type>JKS</Type> - <Password>wso2carbon</Password> - </TrustStore> - </parameter> - </transportSender> - --> - - - - <!-- ================================================= --> - <!-- Phases --> - <!-- ================================================= --> - <phaseOrder type="InFlow"> - <!-- System pre defined phases --> - <!-- - The MsgInObservation phase is used to observe messages as soon as they are - received. In this phase, we could do some things such as SOAP message tracing & keeping - track of the time at which a particular message was received - - NOTE: This should be the very first phase in this flow - --> - <phase name="MsgInObservation"/> - - <phase name="Validation"/> - <phase name="Transport"> - <handler name="RequestURIBasedDispatcher" - class="org.apache.axis2.dispatchers.RequestURIBasedDispatcher"> - <order phase="Transport"/> - </handler> - <handler name="SOAPActionBasedDispatcher" - class="org.apache.axis2.dispatchers.SOAPActionBasedDispatcher"> - <order phase="Transport"/> - </handler> - </phase> - <phase name="Addressing"> - <handler name="AddressingBasedDispatcher" - class="org.wso2.carbon.core.multitenancy.MultitenantAddressingBasedDispatcher"> - <order phase="Addressing"/> - </handler> - </phase> - <phase name="Ghost"> - <handler name="GhostDispatcher" class="org.wso2.carbon.core.dispatchers.GhostDispatcher"/> - </phase> - <phase name="Security"/> - <phase name="PreDispatch"/> - <phase name="Dispatch" class="org.apache.axis2.engine.DispatchPhase"> - <handler name="RequestURIBasedDispatcher" - class="org.apache.axis2.dispatchers.RequestURIBasedDispatcher"/> - <handler name="SOAPActionBasedDispatcher" - class="org.apache.axis2.dispatchers.SOAPActionBasedDispatcher"/> - <handler name="RequestURIOperationDispatcher" - class="org.apache.axis2.dispatchers.RequestURIOperationDispatcher"/> - <handler name="SOAPMessageBodyBasedDispatcher" - class="org.apache.axis2.dispatchers.SOAPMessageBodyBasedDispatcher"/> - - <handler name="HTTPLocationBasedDispatcher" - class="org.apache.axis2.dispatchers.HTTPLocationBasedDispatcher"/> - </phase> - <!-- System pre defined phases --> - <phase name="RMPhase"/> - <phase name="OpPhase"/> - <!-- After Postdispatch phase module author or or service author can add any phase he want --> - <phase name="OperationInPhase"/> - </phaseOrder> - <phaseOrder type="OutFlow"> - <!-- Handlers related to unified-endpoint component are added to the UEPPhase --> - <phase name="UEPPhase" /> - <phase name="RMPhase"/> - <phase name="OpPhase"/> - <!-- user can add his own phases to this area --> - <phase name="OperationOutPhase"/> - <!--system predefined phase--> - <!--these phase will run irrespective of the service--> - <phase name="PolicyDetermination"/> - <phase name="MessageOut"/> - <phase name="Security"/> - - <!-- - The MsgOutObservation phase is used to observe messages just before the - responses are sent out. In this phase, we could do some things such as SOAP message - tracing & keeping track of the time at which a particular response was sent. - - NOTE: This should be the very last phase in this flow - --> - <phase name="MsgOutObservation"/> - </phaseOrder> - <phaseOrder type="InFaultFlow"> - <!-- System pre defined phases --> - <!-- - The MsgInObservation phase is used to observe messages as soon as they are - received. In this phase, we could do some things such as SOAP message tracing & keeping - track of the time at which a particular message was received - - NOTE: This should be the very first phase in this flow - --> - <phase name="MsgInObservation"/> - - <phase name="Validation"/> - <phase name="Transport"> - <handler name="RequestURIBasedDispatcher" - class="org.apache.axis2.dispatchers.RequestURIBasedDispatcher"> - <order phase="Transport"/> - </handler> - <handler name="SOAPActionBasedDispatcher" - class="org.apache.axis2.dispatchers.SOAPActionBasedDispatcher"> - <order phase="Transport"/> - </handler> - </phase> - - <phase name="Addressing"> - <handler name="AddressingBasedDispatcher" - class="org.apache.axis2.dispatchers.AddressingBasedDispatcher"> - <order phase="Addressing"/> - </handler> - </phase> - <phase name="Ghost"> - <handler name="GhostDispatcher" class="org.wso2.carbon.core.dispatchers.GhostDispatcher"/> - </phase> - <phase name="Security"/> - <phase name="PreDispatch"/> - <phase name="Dispatch" class="org.apache.axis2.engine.DispatchPhase"> - <handler name="RequestURIBasedDispatcher" - class="org.apache.axis2.dispatchers.RequestURIBasedDispatcher"/> - <handler name="SOAPActionBasedDispatcher" - class="org.apache.axis2.dispatchers.SOAPActionBasedDispatcher"/> - <handler name="RequestURIOperationDispatcher" - class="org.apache.axis2.dispatchers.RequestURIOperationDispatcher"/> - <handler name="SOAPMessageBodyBasedDispatcher" - class="org.apache.axis2.dispatchers.SOAPMessageBodyBasedDispatcher"/> - - <handler name="HTTPLocationBasedDispatcher" - class="org.apache.axis2.dispatchers.HTTPLocationBasedDispatcher"/> - </phase> - <phase name="RMPhase"/> - <phase name="OpPhase"/> - <!-- user can add his own phases to this area --> - <phase name="OperationInFaultPhase"/> - </phaseOrder> - <phaseOrder type="OutFaultFlow"> - <!-- Handlers related to unified-endpoint component are added to the UEPPhase --> - <phase name="UEPPhase" /> - <phase name="RMPhase"/> - <!-- user can add his own phases to this area --> - <phase name="OperationOutFaultPhase"/> - <phase name="PolicyDetermination"/> - <phase name="MessageOut"/> - <phase name="Security"/> - <!-- - The MsgOutObservation phase is used to observe messages just before the - responses are sent out. In this phase, we could do some things such as SOAP message - tracing & keeping track of the time at which a particular response was sent. - - NOTE: This should be the very last phase in this flow - --> - <phase name="MsgOutObservation"/> - </phaseOrder> - - <!-- ================================================= --> - <!-- Clustering --> - <!-- ================================================= --> - <!-- - To enable clustering for this node, set the value of "enable" attribute of the "clustering" - element to "true". The initialization of a node in the cluster is handled by the class - corresponding to the "class" attribute of the "clustering" element. It is also responsible for - getting this node to join the cluster. - --> - <clustering class="org.apache.axis2.clustering.tribes.TribesClusteringAgent" enable="true"> - - <!-- - This parameter indicates whether the cluster has to be automatically initalized - when the AxisConfiguration is built. If set to "true" the initialization will not be - done at that stage, and some other party will have to explictly initialize the cluster. - --> - <parameter name="AvoidInitiation">true</parameter> - - <!-- - The membership scheme used in this setup. The only values supported at the moment are - "multicast" and "wka" - - 1. multicast - membership is automatically discovered using multicasting - 2. wka - Well-Known Address based multicasting. Membership is discovered with the help - of one or more nodes running at a Well-Known Address. New members joining a - cluster will first connect to a well-known node, register with the well-known node - and get the membership list from it. When new members join, one of the well-known - nodes will notify the others in the group. When a member leaves the cluster or - is deemed to have left the cluster, it will be detected by the Group Membership - Service (GMS) using a TCP ping mechanism. - --> - <parameter name="membershipScheme">wka</parameter> - - <!-- - The clustering domain/group. Nodes in the same group will belong to the same multicast - domain. There will not be interference between nodes in different groups. - --> - <parameter name="domain">IS_CLUSTERING_DOMAIN</parameter> - - <!-- - When a Web service request is received, and processed, before the response is sent to the - client, should we update the states of all members in the cluster? If the value of - this parameter is set to "true", the response to the client will be sent only after - all the members have been updated. Obviously, this can be time consuming. In some cases, - such this overhead may not be acceptable, in which case the value of this parameter - should be set to "false" - --> - <parameter name="synchronizeAll">true</parameter> - - <!-- - The maximum number of times we need to retry to send a message to a particular node - before giving up and considering that node to be faulty - --> - <parameter name="maxRetries">10</parameter> - - <!-- The multicast address to be used --> - <parameter name="mcastAddress">228.0.0.4</parameter> - - <!-- The multicast port to be used --> - <parameter name="mcastPort">45564</parameter> - - <!-- The frequency of sending membership multicast messages (in ms) --> - <parameter name="mcastFrequency">500</parameter> - - <!-- The time interval within which if a member does not respond, the member will be - deemed to have left the group (in ms) - --> - <parameter name="memberDropTime">3000</parameter> - - <!-- - The IP address of the network interface to which the multicasting has to be bound to. - Multicasting would be done using this interface. - --> - <!-- - <parameter name="mcastBindAddress">127.0.0.1</parameter> - --> - <!-- The host name or IP address of this member --> - <!-- - <parameter name="localMemberHost">127.0.0.1</parameter> - --> - - <!-- - The bind adress of this member. The difference between localMemberHost & localMemberBindAddress - is that localMemberHost is the one that is advertised by this member, while localMemberBindAddress - is the address to which this member is bound to. - --> - <!-- - <parameter name="localMemberBindAddress">127.0.0.1</parameter> - --> - - <!-- - The TCP port used by this member. This is the port through which other nodes will - contact this member - --> - <parameter name="localMemberPort">IS_LOCAL_MEMBER_PORT</parameter> - - <!-- - The bind port of this member. The difference between localMemberPort & localMemberBindPort - is that localMemberPort is the one that is advertised by this member, while localMemberBindPort - is the port to which this member is bound to. - --> - <!-- - <parameter name="localMemberBindPort">4001</parameter> - --> - - <!-- - Preserve message ordering. This will be done according to sender order. - --> - <parameter name="preserveMessageOrder">true</parameter> - - <!-- - Maintain atmost-once message processing semantics - --> - <parameter name="atmostOnceMessageSemantics">false</parameter> - - <!-- - Properties specific to this member - --> - <parameter name="properties"> - <property name="backendServerURL" value="https://${hostName}:${httpsPort}/services/"/> - <property name="mgtConsoleURL" value="https://${hostName}:${httpsPort}/"/> - </parameter> - - <!-- - The list of static or well-known members. These entries will only be valid if the - "membershipScheme" above is set to "wka" - --> - <members> - <member> - <hostName>ELB_HOSTNAME</hostName> - <port>ELB_WELL_KNOWN_PORT</port> - </member> - </members> - - <!-- - Enable the groupManagement entry if you need to run this node as a cluster manager. - Multiple application domains with different GroupManagementAgent implementations - can be defined in this section. - --> - <groupManagement enable="false"> - <applicationDomain name="apache.axis2.application.domain" - description="Axis2 group" - agent="org.apache.axis2.clustering.management.DefaultGroupManagementAgent"/> - </groupManagement> - - <!-- - This interface is responsible for handling management of a specific node in the cluster - The "enable" attribute indicates whether Node management has been enabled - --> - <nodeManager class="org.apache.axis2.clustering.management.DefaultNodeManager" - enable="true"/> - - <!-- - This interface is responsible for handling state replication. The property changes in - the Axis2 context hierarchy in this node, are propagated to all other nodes in the cluster. - - The "excludes" patterns can be used to specify the prefixes (e.g. local_*) or - suffixes (e.g. *_local) of the properties to be excluded from replication. The pattern - "*" indicates that all properties in a particular context should not be replicated. - - The "enable" attribute indicates whether context replication has been enabled - --> - <stateManager class="org.apache.axis2.clustering.state.DefaultStateManager" - enable="false"> - <replication> - <defaults> - <exclude name="local_*"/> - <exclude name="LOCAL_*"/> - </defaults> - <context class="org.apache.axis2.context.ConfigurationContext"> - <exclude name="local_*"/> - </context> - <context class="org.apache.axis2.context.ServiceGroupContext"> - <exclude name="local_*"/> - </context> - <context class="org.apache.axis2.context.ServiceContext"> - <exclude name="local_*"/> - </context> - </replication> - </stateManager> - </clustering> -</axisconfig>
http://git-wip-us.apache.org/repos/asf/stratos/blob/e615fb82/tools/stratos-installer/config/is/repository/conf/datasources/master-datasources.xml ---------------------------------------------------------------------- diff --git a/tools/stratos-installer/config/is/repository/conf/datasources/master-datasources.xml b/tools/stratos-installer/config/is/repository/conf/datasources/master-datasources.xml deleted file mode 100644 index c65f758..0000000 --- a/tools/stratos-installer/config/is/repository/conf/datasources/master-datasources.xml +++ /dev/null @@ -1,89 +0,0 @@ -<?xml version='1.0'?> -<!-- - - Licensed to the Apache Software Foundation (ASF) under one - or more contributor license agreements. See the NOTICE file - distributed with this work for additional information - regarding copyright ownership. The ASF licenses this file - to you under the Apache License, Version 2.0 (the - "License"); you may not use this file except in compliance - with the License. You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - - Unless required by applicable law or agreed to in writing, - software distributed under the License is distributed on an - "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY - KIND, either express or implied. See the License for the - specific language governing permissions and limitations - under the License. - ---> - -<datasources-configuration xmlns:svns="http://org.wso2.securevault/configuration";> - - <providers> - <provider>org.wso2.carbon.ndatasource.rdbms.RDBMSDataSourceReader</provider> - </providers> - - <datasources> - - <datasource> - <name>WSO2_CARBON_DB</name> - <description>The datasource used for registry and user manager</description> - <jndiConfig> - <name>jdbc/WSO2CarbonDB</name> - </jndiConfig> - <definition type="RDBMS"> - <configuration> - <url>jdbc:mysql://USERSTORE_DB_HOSTNAME:USERSTORE_DB_PORT/USERSTORE_DB_SCHEMA?autoReconnect=true</url> - <username>USERSTORE_DB_USER</username> - <password>USERSTORE_DB_PASS</password> - <driverClassName>com.mysql.jdbc.Driver</driverClassName> - <maxActive>50</maxActive> - <maxWait>60000</maxWait> - <testOnBorrow>true</testOnBorrow> - <validationQuery>SELECT 1</validationQuery> - <validationInterval>30000</validationInterval> - </configuration> - </definition> - </datasource> - - <!-- For an explanation of the properties, see: http://people.apache.org/~fhanik/jdbc-pool/jdbc-pool.html --> - <!--datasource> - <name>SAMPLE_DATA_SOURCE</name> - <jndiConfig> - <name></name> - <environment> - <property name="java.naming.factory.initial"></property> - <property name="java.naming.provider.url"></property> - </environment> - </jndiConfig> - <definition type="RDBMS"> - <configuration> - - <defaultAutoCommit></defaultAutoCommit> - <defaultReadOnly></defaultReadOnly> - <defaultTransactionIsolation>NONE|READ_COMMITTED|READ_UNCOMMITTED|REPEATABLE_READ|SERIALIZABLE</defaultTransactionIsolation> - <defaultCatalog></defaultCatalog> - <username></username> - <password svns:secretAlias="WSO2.DB.Password"></password> - <maxActive></maxActive> - <maxIdle></maxIdle> - <initialSize></initialSize> - <maxWait></maxWait> - - <dataSourceClassName>com.mysql.jdbc.jdbc2.optional.MysqlXADataSource</dataSourceClassName> - <dataSourceProps> - <property name="url">jdbc:mysql://localhost:3306/Test1</property> - <property name="user">root</property> - <property name="password">123</property> - </dataSourceProps> - - </configuration> - </definition> - </datasource--> - - </datasources> - -</datasources-configuration> http://git-wip-us.apache.org/repos/asf/stratos/blob/e615fb82/tools/stratos-installer/config/is/repository/conf/tenant-mgt.xml ---------------------------------------------------------------------- diff --git a/tools/stratos-installer/config/is/repository/conf/tenant-mgt.xml b/tools/stratos-installer/config/is/repository/conf/tenant-mgt.xml deleted file mode 100644 index 3cd0ac1..0000000 --- a/tools/stratos-installer/config/is/repository/conf/tenant-mgt.xml +++ /dev/null @@ -1,39 +0,0 @@ -<!-- - ~ Licensed to the Apache Software Foundation (ASF) under one - ~ or more contributor license agreements. See the NOTICE file - ~ distributed with this work for additional information - ~ regarding copyright ownership. The ASF licenses this file - ~ to you under the Apache License, Version 2.0 (the - ~ "License"); you may not use this file except in compliance - ~ with the License. You may obtain a copy of the License at - ~ - ~ http://www.apache.org/licenses/LICENSE-2.0 - ~ - ~ Unless required by applicable law or agreed to in writing, - ~ software distributed under the License is distributed on an - ~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY - ~ KIND, either express or implied. See the License for the - ~ specific language governing permissions and limitations - ~ under the License. - --> - -<!--TenantManager class="org.wso2.carbon.user.core.tenant.JDBCTenantManager"> -</TenantManager--> -<!--If the product is using LDAP user store in MT mode, use following tenant manager.--> -<!--TenantManager class="org.wso2.carbon.user.core.tenant.CommonHybridLDAPTenantManager"> - <Property name="RootPartition">dc=wso2,dc=com</Property> - <Property name="OrganizationalObjectClass">organizationalUnit</Property> - <Property name="OrganizationalAttribute">ou</Property> - <Property name="OrganizationalSubContextObjectClass">organizationalUnit</Property> - <Property name="OrganizationalSubContextAttribute">ou</Property> -</TenantManager--> -<!--Following tenant manager is used by Identity Server (IS) as its default tenant manager. - IS will do token replacement when building the product. Therefore do not change the syntax.--> -<TenantManager class="org.wso2.carbon.user.core.tenant.JDBCTenantManager"> - <Property name="RootPartition">dc=wso2,dc=org</Property> - <Property name="OrganizationalObjectClass">organizationalUnit</Property> - <Property name="OrganizationalAttribute">ou</Property> - <Property name="OrganizationalSubContextObjectClass">organizationalUnit</Property> - <Property name="OrganizationalSubContextAttribute">ou</Property> -</TenantManager> - http://git-wip-us.apache.org/repos/asf/stratos/blob/e615fb82/tools/stratos-installer/config/is/repository/conf/tomcat/catalina-server.xml ---------------------------------------------------------------------- diff --git a/tools/stratos-installer/config/is/repository/conf/tomcat/catalina-server.xml b/tools/stratos-installer/config/is/repository/conf/tomcat/catalina-server.xml deleted file mode 100644 index e985ef4..0000000 --- a/tools/stratos-installer/config/is/repository/conf/tomcat/catalina-server.xml +++ /dev/null @@ -1,98 +0,0 @@ -<?xml version='1.0' encoding='utf-8'?> -<!-- - Licensed to the Apache Software Foundation (ASF) under one or more - contributor license agreements. See the NOTICE file distributed with - this work for additional information regarding copyright ownership. - The ASF licenses this file to You under the Apache License, Version 2.0 - (the "License"); you may not use this file except in compliance with - the License. You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - - Unless required by applicable law or agreed to in writing, software - distributed under the License is distributed on an "AS IS" BASIS, - WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - See the License for the specific language governing permissions and - limitations under the License. ---> - -<Server port="8005" shutdown="SHUTDOWN"> - - <Service className="org.wso2.carbon.tomcat.ext.service.ExtendedStandardService" name="Catalina"> - - <!-- - optional attributes: - - proxyPort="80" - --> - <Connector protocol="org.apache.coyote.http11.Http11NioProtocol" - port="9763" - proxyPort="PROXY_PORT_HTTP" - bindOnInit="false" - maxHttpHeaderSize="8192" - acceptorThreadCount="2" - maxThreads="250" - minSpareThreads="50" - disableUploadTimeout="false" - connectionUploadTimeout="120000" - maxKeepAliveRequests="200" - acceptCount="200" - server="WSO2 Carbon Server" - compression="on" - compressionMinSize="2048" - noCompressionUserAgents="gozilla, traviata" - compressableMimeType="text/html,text/javascript,application/x-javascript,application/javascript,application/xml,text/css,application/xslt+xml,text/xsl,image/gif,image/jpg,image/jpeg" - URIEncoding="UTF-8"/> - - <!-- - optional attributes: - - proxyPort="443" - --> - <Connector protocol="org.apache.coyote.http11.Http11NioProtocol" - port="9443" - proxyPort="PROXY_PORT_HTTPS" - bindOnInit="false" - sslProtocol="TLS" - maxHttpHeaderSize="8192" - acceptorThreadCount="2" - maxThreads="250" - minSpareThreads="50" - disableUploadTimeout="false" - enableLookups="false" - connectionUploadTimeout="120000" - maxKeepAliveRequests="200" - acceptCount="200" - server="WSO2 Carbon Server" - clientAuth="false" - compression="on" - scheme="https" - secure="true" - SSLEnabled="true" - compressionMinSize="2048" - noCompressionUserAgents="gozilla, traviata" - compressableMimeType="text/html,text/javascript,application/x-javascript,application/javascript,application/xml,text/css,application/xslt+xml,text/xsl,image/gif,image/jpg,image/jpeg" - keystoreFile="${carbon.home}/repository/resources/security/wso2carbon.jks" - keystorePass="wso2carbon" - URIEncoding="UTF-8"/> - - - - <Engine name="Catalina" defaultHost="localhost"> - - <!--Realm className="org.apache.catalina.realm.MemoryRealm" pathname="${carbon.home}/repository/conf/tomcat/tomcat-users.xml"/--> - - <Realm className="org.wso2.carbon.tomcat.ext.realms.CarbonTomcatRealm"/> - - <Host name="localhost" unpackWARs="true" deployOnStartup="false" autoDeploy="false" appBase="${carbon.home}/repository/deployment/server/webapps/"> - <Valve className="org.wso2.carbon.tomcat.ext.valves.CarbonContextCreatorValve"/> - <Valve className="org.apache.catalina.valves.AccessLogValve" directory="${carbon.home}/repository/logs" - prefix="http_access_" suffix=".log" - pattern="combined" /> - <Valve className="org.wso2.carbon.tomcat.ext.valves.CarbonStuckThreadDetectionValve" threshold="600"/> - <Valve className="org.wso2.carbon.tomcat.ext.valves.CompositeValve"/> - </Host> - </Engine> - </Service> -</Server> - http://git-wip-us.apache.org/repos/asf/stratos/blob/e615fb82/tools/stratos-installer/config/is/repository/conf/user-mgt.xml ---------------------------------------------------------------------- diff --git a/tools/stratos-installer/config/is/repository/conf/user-mgt.xml b/tools/stratos-installer/config/is/repository/conf/user-mgt.xml deleted file mode 100644 index 26edc70..0000000 --- a/tools/stratos-installer/config/is/repository/conf/user-mgt.xml +++ /dev/null @@ -1,248 +0,0 @@ -<!-- - - Licensed to the Apache Software Foundation (ASF) under one - - or more contributor license agreements. See the NOTICE file - - distributed with this work for additional information - - regarding copyright ownership. The ASF licenses this file - - to you under the Apache License, Version 2.0 (the - - "License"); you may not use this file except in compliance - - with the License. You may obtain a copy of the License at - - - - http://www.apache.org/licenses/LICENSE-2.0 - - - - Unless required by applicable law or agreed to in writing, - - software distributed under the License is distributed on an - - "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY - - KIND, either express or implied. See the License for the - - specific language governing permissions and limitations - - under the License. ---> - -<UserManager> - <Realm> - <Configuration> - <AdminRole>admin</AdminRole> - <AdminUser> - <UserName>admin</UserName> - <Password>admin</Password> - </AdminUser> - <EveryOneRoleName>everyone</EveryOneRoleName> <!-- By default users in this role sees the registry root --> - <Property name="dataSource">jdbc/WSO2CarbonDB</Property> - <Property name="MultiTenantRealmConfigBuilder">org.wso2.carbon.user.core.config.multitenancy.SimpleRealmConfigBuilder</Property> - </Configuration> - <!-- Following is the default user store manager. This user store manager is based on embedded-apacheds LDAP. It reads/writes users and roles into the default apacheds LDAP user store. Descriptions about each of the following properties can be found in user management documentation of the respective product. In case if user core cache domain is needed to identify uniquely set property <Property name="UserCoreCacheIdentifier">domain</Property> - Note: Do not comment within UserStoreManager tags. Cause, specific tag names are used as tokens when building configurations for products. --> - <!--UserStoreManager class="org.wso2.carbon.user.core.ldap.ReadWriteLDAPUserStoreManager"> - <Property name="ConnectionURL">ldap://localhost:${Ports.EmbeddedLDAP.LDAPServerPort}</Property> - <Property name="ConnectionName">uid=admin,ou=system</Property> - <Property name="ConnectionPassword">admin</Property> - <Property name="passwordHashMethod">SHA</Property> - <Property name="UserNameListFilter">(objectClass=person)</Property> - <Property name="UserEntryObjectClass">wso2Person</Property> - <Property name="UserSearchBase">ou=Users,dc=wso2,dc=org</Property> - <Property name="UserNameSearchFilter">(&(objectClass=person)(uid=?))</Property> - <Property name="UserNameAttribute">uid</Property> - <Property name="PasswordJavaScriptRegEx">^[\\S]{5,30}$</Property> - <Property name="UsernameJavaScriptRegEx">^[\\S]{3,30}$</Property> - <Property name="UsernameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property> - <Property name="RolenameJavaScriptRegEx">^[\\S]{3,30}$</Property> - <Property name="RolenameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property> - <Property name="ReadLDAPGroups">true</Property> - <Property name="WriteLDAPGroups">true</Property> - <Property name="EmptyRolesAllowed">true</Property> - <Property name="GroupSearchBase">ou=Groups,dc=wso2,dc=org</Property> - <Property name="GroupNameListFilter">(objectClass=groupOfNames)</Property> - <Property name="GroupEntryObjectClass">groupOfNames</Property> - <Property name="GroupNameSearchFilter">(&(objectClass=groupOfNames)(cn=?))</Property> - <Property name="GroupNameAttribute">cn</Property> - <Property name="MembershipAttribute">member</Property> - <Property name="UserRolesCacheEnabled">true</Property> - <Property name="UserDNPattern">uid={0},ou=Users,dc=wso2,dc=org</Property> - <Property name="maxFailedLoginAttempt">0</Property> - </UserStoreManager--> - - <!-- Following is the configuration for internal JDBC user store. This user store manager is based on JDBC. In case if application needs to manage passwords externally set property <Property name="PasswordsExternallyManaged">true</Property>. In case if user core cache domain is needed to identify uniquely set property <Property name="UserCoreCacheIdentifier">domain</Property>. Furthermore properties, IsEmailUserName and DomainCalculation are readonly properties. - Note: Do not comment within UserStoreManager tags. Cause, specific tag names are used as tokens when building configurations for products. --> - <UserStoreManager class="org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager"> - <Property name="ReadOnly">false</Property> - <Property name="MaxUserNameListLength">100</Property> - <Property name="IsEmailUserName">false</Property> - <Property name="DomainCalculation">default</Property> - <Property name="passwordHashMethod">SHA</Property> - <Property name="PasswordDigest">SHA-256</Property> - <Property name="StoreSaltedPassword">true</Property> - <Property name="UserNameUniqueAcrossTenants">false</Property> - <Property name="PasswordJavaRegEx">^[\S]{5,30}$</Property> - <Property name="PasswordJavaScriptRegEx">^[\\S]{5,30}$</Property> - <Property name="UsernameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property> - <Property name="UsernameJavaScriptRegEx">^[\\S]{3,30}$</Property> - <Property name="RolenameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property> - <Property name="RolenameJavaScriptRegEx">^[\\S]{3,30}$</Property> - <Property name="UserRolesCacheEnabled">true</Property> - <Property name="maxFailedLoginAttempt">0</Property> - </UserStoreManager> - - <!-- If product is using an external LDAP as the user store in READ ONLY mode, use following user manager. - In case if user core cache domain is needed to identify uniquely set property <Property name="UserCoreCacheIdentifier">domain</Property> - --> - <!--UserStoreManager class="org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager"> - <Property name="ReadOnly">true</Property> - <Property name="MaxUserNameListLength">100</Property> - <Property name="ConnectionURL">ldap://localhost:10389</Property> - <Property name="ConnectionName">uid=admin,ou=system</Property> - <Property name="ConnectionPassword">admin</Property> - <Property name="UserSearchBase">ou=system</Property> - <Property name="UserNameListFilter">(objectClass=person)</Property> - <Property name="UserNameAttribute">uid</Property> - <Property name="ReadLDAPGroups">false</Property> - <Property name="GroupSearchBase">ou=system</Property> - <Property name="GroupNameListFilter">(objectClass=groupOfNames)</Property> - <Property name="GroupNameAttribute">cn</Property> - <Property name="MembershipAttribute">member</Property> - <Property name="UserRolesCacheEnabled">true</Property> - <Property name="ReplaceEscapeCharactersAtUserLogin">true</Property> - <Property name="maxFailedLoginAttempt">0</Property> - </UserStoreManager--> - - <!-- Active directory configuration is as follows. - In case if user core cache domain is needed to identify uniquely set property <Property name="UserCoreCacheIdentifier">domain</Property> - There are few special properties for "Active Directory". - They are : - 1.Referral - (comment out this property if this feature is not reuired) This enables LDAP referral support. - 2.BackLinksEnabled - (Do not comment, set to true or false) In some cases LDAP works with BackLinksEnabled. In which role is stored - at user level. Depending on this value we need to change the Search Base within code. - 3.isADLDSRole - (Do not comment) Set to true if connecting to an AD LDS instance else set to false. - --> - <!--UserStoreManager class="org.wso2.carbon.user.core.ldap.ActiveDirectoryUserStoreManager"> - <Property name="defaultRealmName">WSO2.ORG</Property> - <Property name="kdcEnabled">false</Property> - <Property name="ConnectionURL">ldaps://10.100.1.100:636</Property> - <Property name="ConnectionName">CN=admin,CN=Users,DC=WSO2,DC=Com</Property> - <Property name="ConnectionPassword">A1b2c3d4</Property> - <Property name="passwordHashMethod">SHA</Property> - <Property name="UserSearchBase">CN=Users,DC=WSO2,DC=Com</Property> - <Property name="UserEntryObjectClass">user</Property> - <Property name="UserNameAttribute">cn</Property> - <Property name="isADLDSRole">false</Property> - <Property name="userAccountControl">512</Property> - <Property name="UserNameListFilter">(objectClass=user)</Property> - <Property name="UserNameSearchFilter">(&(objectClass=user)(cn=?))</Property> - <Property name="UsernameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property> - <Property name="UsernameJavaScriptRegEx">^[\\S]{3,30}$</Property> - <Property name="PasswordJavaScriptRegEx">^[\\S]{5,30}$</Property> - <Property name="RolenameJavaScriptRegEx">^[\\S]{3,30}$</Property> - <Property name="RolenameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property> - <Property name="ReadLDAPGroups">true</Property> - <Property name="WriteLDAPGroups">true</Property> - <Property name="EmptyRolesAllowed">true</Property> - <Property name="GroupSearchBase">CN=Users,DC=WSO2,DC=Com</Property> - <Property name="GroupEntryObjectClass">group</Property> - <Property name="GroupNameAttribute">cn</Property> - <Property name="MembershipAttribute">member</Property> - <Property name="GroupNameListFilter">(objectcategory=group)</Property> - <Property name="GroupNameSearchFilter">(&(objectClass=group)(cn=?))</Property> - <Property name="UserRolesCacheEnabled">true</Property> - <Property name="Referral">follow</Property> - <Property name="BackLinksEnabled">true</Property> - <Property name="maxFailedLoginAttempt">0</Property> - </UserStoreManager--> - - <!-- If product is using an external LDAP as the user store in read/write mode, use following user manager - In case if user core cache domain is needed to identify uniquely set property <Property name="UserCoreCacheIdentifier">domain</Property> - --> - <!--UserStoreManager class="org.wso2.carbon.user.core.ldap.ReadWriteLDAPUserStoreManager"> - <Property name="ConnectionURL">ldap://localhost:10389</Property> - <Property name="ConnectionName">uid=admin,ou=system</Property> - <Property name="ConnectionPassword">secret</Property> - <Property name="passwordHashMethod">SHA</Property> - <Property name="UserNameListFilter">(objectClass=person)</Property> - <Property name="UserEntryObjectClass">inetOrgPerson</Property> - <Property name="UserSearchBase">ou=system</Property> - <Property name="UserNameSearchFilter">(&(objectClass=person)(uid=?))</Property> - <Property name="UserNameAttribute">uid</Property> - <Property name="UsernameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property> - <Property name="UsernameJavaScriptRegEx">^[\\S]{3,30}$</Property> - <Property name="RolenameJavaScriptRegEx">^[\\S]{3,30}$</Property> - <Property name="RolenameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property> - <Property name="PasswordJavaScriptRegEx">^[\\S]{5,30}$</Property> - <Property name="ReadLDAPGroups">true</Property> - <Property name="WriteLDAPGroups">true</Property> - <Property name="EmptyRolesAllowed">false</Property> - <Property name="GroupSearchBase">ou=system</Property> - <Property name="GroupNameListFilter">(objectClass=groupOfNames)</Property> - <Property name="GroupEntryObjectClass">groupOfNames</Property> - <Property name="GroupNameSearchFilter">(&(objectClass=groupOfNames)(cn=?))</Property> - <Property name="GroupNameAttribute">cn</Property> - <Property name="MembershipAttribute">member</Property> - <Property name="UserRolesCacheEnabled">true</Property> - <Property name="ReplaceEscapeCharactersAtUserLogin">true</Property> - <Property name="maxFailedLoginAttempt">0</Property> - </UserStoreManager--> - - <!-- Following user manager is used by Identity Server (IS) as its default user manager. - IS will do token replacement when building the product. Therefore do not change the syntax. - If "kdcEnabled" parameter is true, IS will allow service principle management. Thus "ServicePasswordJavaRegEx", "ServiceNameJavaRegEx" - properties control the service name format and service password formats. - In case if user core cache domain is needed to identify uniquely set property <Property name="UserCoreCacheIdentifier">domain</Property> - --> - <!--UserStoreManager class="org.wso2.carbon.user.core.ldap.ReadWriteLDAPUserStoreManager"> - <Property name="defaultRealmName">WSO2.ORG</Property> - <Property name="kdcEnabled">false</Property> - <Property name="ConnectionURL">ldap://localhost:${Ports.EmbeddedLDAP.LDAPServerPort}</Property> - <Property name="ConnectionName">uid=admin,ou=system</Property> - <Property name="ConnectionPassword">admin</Property> - <Property name="passwordHashMethod">SHA</Property> - <Property name="UserNameListFilter">(objectClass=person)</Property> - <Property name="UserEntryObjectClass">scimPerson</Property> - <Property name="UserSearchBase">ou=Users,dc=wso2,dc=org</Property> - <Property name="UserNameSearchFilter">(&(objectClass=person)(uid=?))</Property> - <Property name="UserNameAttribute">uid</Property> - <Property name="PasswordJavaScriptRegEx">^[\\S]{5,30}$</Property> - <Property name="ServicePasswordJavaRegEx">^[\\S]{5,30}$</Property> - <Property name="ServiceNameJavaRegEx">^[\\S]{2,30}/[\\S]{2,30}$</Property> - <Property name="UsernameJavaScriptRegEx">^[\\S]{3,30}$</Property> - <Property name="UsernameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property> - <Property name="RolenameJavaScriptRegEx">^[\\S]{3,30}$</Property> - <Property name="RolenameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property> - <Property name="ReadLDAPGroups">true</Property> - <Property name="WriteLDAPGroups">true</Property> - <Property name="EmptyRolesAllowed">true</Property> - <Property name="GroupSearchBase">ou=Groups,dc=wso2,dc=org</Property> - <Property name="GroupNameListFilter">(objectClass=groupOfNames)</Property> - <Property name="GroupEntryObjectClass">groupOfNames</Property> - <Property name="GroupNameSearchFilter">(&(objectClass=groupOfNames)(cn=?))</Property> - <Property name="GroupNameAttribute">cn</Property> - <Property name="MembershipAttribute">member</Property> - <Property name="UserRolesCacheEnabled">true</Property> - <Property name="UserDNPattern">uid={0},ou=Users,dc=wso2,dc=org</Property> - <Property name="SCIMEnabled">true</Property> - <Property name="maxFailedLoginAttempt">0</Property> - </UserStoreManager--> - - <AuthorizationManager - class="org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager"> - <Property name="AdminRoleManagementPermissions">/permission</Property> - <Property name="AuthorizationCacheEnabled">true</Property> - </AuthorizationManager> - </Realm> -</UserManager> - -<!--*******Description of some of the configuration properties used in user-mgt.xml********************************* -UserRolesCacheEnabled - This is to indicate whether to cache role list of a user. By default it is set to true. - You may need to disable it if user-roles are changed by external means and need to reflect - those changes in the carbon product immediately. - -ReplaceEscapeCharactersAtUserLogin - This is to configure whether escape characters in user name needs to be replaced at user login. - Currently the identified escape characters that needs to be replaced are '\' & '\\' - -UserDNPattern - This property will be used when authenticating users. During authentication we do a bind. But if the user is login with - email address or some other property we need to first lookup LDAP and retreive DN for the user. This involves an additional step. - If UserDNPattern is specified the DN will be contructed using the pattern specified in this property. Performance of this is much better than looking - up DN and binding user. - -passwordHashMethod - This says how the password should be stored. Allowed values are as follows, - SHA - Uses SHA digest method - MD5 - Uses MD 5 digest method - PLAIN_TEXT - Plain text passwords - In addition to above this supports all digest methods supported by http://docs.oracle.com/javase/6/docs/api/java/security/MessageDigest.html. - --->
