# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

#
# This file provides list of deployment variables for the Policy Manager Web Application 
#

#------------------------- DB CONFIG - BEGIN ----------------------------------
# Uncomment the below if the DBA steps need to be run separately
#setup_mode=SeparateDBA

PYTHON_COMMAND_INVOKER=python

#DB_FLAVOR=MYSQL|ORACLE|POSTGRES|MSSQL
DB_FLAVOR=MYSQL
#
# The executable path to be used to invoke command-line MYSQL 
#
#SQL_COMMAND_INVOKER='mysql'
#SQL_COMMAND_INVOKER='sqlplus'
SQL_COMMAND_INVOKER='mysql'

#
# Location of DB client library (please check the location of the jar file)
#
#SQL_CONNECTOR_JAR=/usr/share/java/ojdbc6.jar
#SQL_CONNECTOR_JAR=/usr/share/java/mysql-connector-java.jar
#SQL_CONNECTOR_JAR=/usr/share/java/postgresql.jar
#SQL_CONNECTOR_JAR=/usr/share/java/sqljdbc4.jar
SQL_CONNECTOR_JAR=/usr/share/java/mysql-connector-java-5.1.36.jar


#
# DB password for the DB admin user-id
# **************************************************************************
# ** If the password is left empty or not-defined here, 
# ** it will be prompted to enter the password during installation process 
# **************************************************************************
#
#db_root_user=root|SYS|postgres|sa
db_root_user=root
db_root_password=root
db_host=localhost

#
# DB UserId used for the Ranger schema
#
db_name=ranger
db_user=rangeradmin
db_password=rangeradmin

#Source for Audit DB 
# * audit_db is solr or db
audit_store=db

# * audit_solr_url URL to Solr. E.g. http://<solr_host>:6083/solr/ranger_audits
audit_solr_urls=
audit_solr_user=
audit_solr_password=
audit_solr_zookeepers=


#
# DB UserId for storing auditlog infromation
# 
# * audit_db can be same as the Ranger schema db
# * audit_db must exists in the same ${db_host} as Ranger database ${db_name} 
# * audit_user must be a different user than db_user (as audit user has access to only audit tables)
#
audit_db_name=ranger_audit
audit_db_user=rangerlogger
audit_db_password=rangerlogger



#------------------------- DB CONFIG - END ----------------------------------

#
# ------- PolicyManager CONFIG ----------------
#

policymgr_external_url=http://localhost:6080
policymgr_http_enabled=true

#
# ------- PolicyManager CONFIG - END ---------------
#


#
# ------- UNIX User CONFIG ----------------
#
unix_user=ranger
unix_group=ranger

#
# ------- UNIX User CONFIG  - END ----------------
#

#
# UNIX authentication service for Policy Manager
#
# PolicyManager can authenticate using UNIX username/password
# The UNIX server specified here as authServiceHostName needs to be installed with ranger-unix-ugsync package.
# Once the service is installed on authServiceHostName, the UNIX username/password from the host <authServiceHostName> can be used to login into policy manager
#
# ** The installation of ranger-unix-ugsync package can be installed after the policymanager installation is finished.
#
#LDAP|ACTIVE_DIRECTORY|UNIX|NONE
authentication_method=LDAP
#remoteLoginEnabled=true
#authServiceHostName=localhost
#authServicePort=5151

####LDAP settings - Required only if have selected LDAP authentication ####
#
# Sample Settings
#
#xa_ldap_url="ldap://127.0.0.1:389"
#xa_ldap_userDNpattern="uid={0},ou=users,dc=xasecure,dc=net"
#xa_ldap_groupSearchBase="ou=groups,dc=xasecure,dc=net"
#xa_ldap_groupSearchFilter="(member=uid={0},ou=users,dc=xasecure,dc=net)"
#xa_ldap_groupRoleAttribute="cn"
#xa_ldap_base_dn="dc=xasecure,dc=net"
#xa_ldap_bind_dn="cn=admin,ou=users,dc=xasecure,dc=net"
#xa_ldap_bind_password=
#xa_ldap_referral=follow|ignore

xa_ldap_url="ldap://127.0.0.1:389"
xa_ldap_userDNpattern="cn={0},dc=platalytics,dc=com"
xa_ldap_groupSearchBase="dc=platalytics,dc=com"
xa_ldap_groupSearchFilter="(member=uid={0},ou=users,dc=platalytics,dc=com)"
xa_ldap_groupRoleAttribute="cn"
xa_ldap_base_dn="dc=platalytics,dc=com"
xa_ldap_bind_dn="cn=admin,dc=platalytics,dc=com"
xa_ldap_bind_password="confiz123"
xa_ldap_referral=follow|ignore
####ACTIVE_DIRECTORY settings - Required only if have selected AD authentication ####
#
# Sample Settings
#
#xa_ldap_ad_domain="xasecure.net"
#xa_ldap_ad_url="ldap://127.0.0.1:389"
#xa_ldap_ad_base_dn="dc=xasecure,dc=net"
#xa_ldap_ad_bind_dn="cn=administrator,ou=users,dc=xasecure,dc=net"
#xa_ldap_ad_bind_password=
#xa_ldap_ad_referral=follow|ignore

xa_ldap_ad_domain=
xa_ldap_ad_url=
xa_ldap_ad_base_dn=
xa_ldap_ad_bind_dn=
xa_ldap_ad_bind_password=
xa_ldap_ad_referral=
# -----------------------------------------------------------
#

# #################  DO NOT MODIFY ANY VARIABLES BELOW #########################
#
# --- These deployment variables are not to be modified unless you understand the full impact of the changes
#
################################################################################

XAPOLICYMGR_DIR=$PWD
app_home=$PWD/ews/webapp
TMPFILE=$PWD/.fi_tmp
LOGFILE=$PWD/logfile
LOGFILES="$LOGFILE"

JAVA_BIN='java'
JAVA_VERSION_REQUIRED='1.7'
JAVA_ORACLE='Java(TM) SE Runtime Environment'

#mysql_create_user_file=${PWD}/db/mysql/create_dev_user.sql
mysql_core_file=db/mysql/xa_core_db.sql
mysql_audit_file=db/mysql/xa_audit_db.sql
#mysql_asset_file=${PWD}/db/mysql/reset_asset.sql

#oracle_create_user_file=${PWD}/db/oracle/create_dev_user_oracle.sql
oracle_core_file=db/oracle/xa_core_db_oracle.sql
oracle_audit_file=db/oracle/xa_audit_db_oracle.sql
#oracle_asset_file=${PWD}/db/oracle/reset_asset_oracle.sql
#
postgres_core_file=db/postgres/xa_core_db_postgres.sql
postgres_audit_file=db/postgres/xa_audit_db_postgres.sql
sqlserver_core_file=db/sqlserver/xa_core_db_sqlserver.sql
sqlserver_audit_file=db/sqlserver/xa_audit_db_sqlserver.sql
cred_keystore_filename=$app_home/WEB-INF/classes/conf/.jceks/rangeradmin.jceks
