# The contents of this file are subject to the terms
# of the Common Development and Distribution License
# (the License). You may not use this file except in
# compliance with the License.
#
# You can obtain a copy of the License at
# https://opensso.dev.java.net/public/CDDLv1.0.html or
# opensso/legal/CDDLv1.0.txt
# See the License for the specific language governing
# permission and limitations under the License.
#
# When distributing Covered Code, include this CDDL
# Header Notice in each file and include the License file
# at opensso/legal/CDDLv1.0.txt.
# If applicable, add the following below the CDDL Header,
# with the fields enclosed by brackets [] replaced by
# your own identifying information:
# "Portions Copyrighted [year] [name of copyright owner]"
#
# $Id: ConfiguratorCommon.properties,v 1.5 2009/06/25 22:53:18 mrudulahg Exp $
#
# Copyright 2009 Sun Microsystems Inc. All Rights Reserved
#

#
# ConfiguratorCommon.properties
# This file contains properties which are common to all the server
# configurations. At run time properties in this file and properties from 
# Configurator-<servername>.properites will be merged. 
# The merged file will be used for QATest run.
# #############################################################################

# The number of milliseconds client calls should wait for notification
# from server to dirty the client side cache. The minimum should be set
# to at least 5000 (5 seconds). if you think you are getting random results
# try tuning this property
notification_sleep=5000

# The encryption key to use for server configuration and during execution to
# encrypt/decrypt the password attributes set in the service instances like 
# Data Store configuration. Value could be any random string

am.encryption.pwd=FederatedAccessManagerEncryptionKey

# Logging level for the framework. Framework user the following log levels:
# SEVERE, CONFIG, FINE and FINEST, if no value set then it defaults to FINE
log_level=FINEST

# Logging level for the client sdk. AMConfig.proeprties generated by
# clientsdksamples module overrides it
com.iplanet.services.debug.level=message

#Cookie name for the client sdk.
com.iplanet.am.cookie.name=iPlanetDirectoryPro

#############################################################################
# top level admin user name typically it is amadmin but any 
# top level admin role user would be valid
amadmin_username=amadmin

# app user name, this user is used to obtain the app ssotoken
# required by the client sdk to talk to the server. Any agent entity name is
# valid for this property
com.sun.identity.agents.app.username=UrlAccessAgent

# User DN to use for directory configuration. This user is used to BIND to
# the directory to load the opensso specific configuration data. For the 
# embedded configuration this is hard coded to cn=directory manager
ds_dirmgrdn=cn=Directory Manager

# Root realm (default is set to "/") against which the qatest tests are executed
realm=/

# The fqdn of client host on/from where client sdk calls are being made.
# '<protocol>://<fqdn>:<notification port>/<notification uri>'.
# This value auto generated by the qatest  
com.sun.identity.client.notification.url=@COPY_FROM_CONFIG@

#############################################################################
# This section contains different datastore specific properties
#############################################################################
# User Management Datastore. This can take only two values: embedded or
# dirServer. If embedded it uses the SM directory server to store user identity
# data. If dirServer is used, qatest deletes the default
# datastore and creates new datastore(s). The data to create this datastore(s)
# is picked from the resources/config/configGlobalData.properties file.
# This value is used each time qatest is executed. This is used each time
# qatest is executed.
umdatastore=dirServer

# Service Management Datastore. This can take only two values: embedded or
# dirServer. If set to embedded, embedded OpenDS is used as the datastore. If
# set to dirServer, remote directory is used as the datastore. This is used
# only at the time of configuring the war.
datastore=embedded

#############################################################################
# Execution realm against which the tests should be run (default is set to "/")
# this could be any valid realm, currently only federation tests are supported
# with any realm
execution_realm=/

# This flag indicates if the execution realm tree should be deleted recursivly
# or not. 
# If execution_realm is set to /sub1/sub2/sub3 
# and this flag is set to true then /sub1 realm will be deleted recursivly. 
# But if this flag is set to false then only /sub3 realm will be deleted. 
subrealm_recursive_delete=false

# If polling is enabled for client sdk or not
com.iplanet.am.session.client.polling.enable=false

# Polling interval for session 
com.iplanet.am.session.client.polling.period=180

# Agents polling interval in sec
com.sun.identity.agents.polling.interval=3

# Enable client side idm caching or not.
com.sun.identity.idm.cache.enabled=false

# Cache mode for policy on client sdk
com.sun.identity.policy.client.cacheMode=subtree

# SDK package 
com.iplanet.am.sdk.package=com.iplanet.am.sdk.remote

# Server mode to false indicates it is client side application.
com.iplanet.am.serverMode=false

com.iplanet.services.debug.directory=@BASE_DIR@/debug
com.iplanet.am.defaultOrg=@COPY_FROM_CONFIG@

com.sun.identity.monitoring=off

#############################################################################
# Will distributed authentication be used in the installation under test.
# Value should be "true" if distributed authentication is used and "false" if
# not.
dist_auth_enabled=false

# The notification URL of the distributed authentication deployment.
# This value should have the following form:
# '<da-protocol>://<da-fqdn>:<da-port>/<da-deploy-uri>/notificationservice
# This value is only used if dist_auth_enabled is set to "true".
dist_auth_notification_service=

#
# Properties utilized for coupled configurations like saml, idff, multi protocol
# etc. By default the values for these properties are set using the values
# listed above but they can be changed to whatever the end user desires. User
# defined values will override the default values. These properties do not
# become part of client side AMConfig.properties file. This is becuase multi 
# server tests do not use client sdk to talk to the server. Currently that 
# communication happens through famadm.jsp.
#
# Meta alias to use when configurating the metadata. By default it is set to 
# FQDN of the host name.
metaalias=@COPY_FROM_CONFIG@

# The name of entity to be created. By default it is set to FQDN of the host
# name.
entity_name=@COPY_FROM_CONFIG@

# Name of circle of trust. By default it is set as spcot for SP and idpcot for
# IDP.
cot=@COPY_FROM_CONFIG@

# Protocol, Host, port, deployment_uri for server. 
# It will be picked up from the naming service url. 
com.iplanet.am.server.protocol=@COPY_FROM_CONFIG@
com.iplanet.am.server.host=@COPY_FROM_CONFIG@
com.iplanet.am.server.port=@COPY_FROM_CONFIG@
com.iplanet.am.services.deploymentDescriptor=@COPY_FROM_CONFIG@

#
# It is used for deploying web application which contains html files
# These files are used by different modules.
internal.webapp.uri=/internalwebapp

# If this flag is set to true, Multiprotocol testcases will use one IDP 
# & three SP's. 
multiprotocol_enabled=false

# SP points to the hostname. Configurator-<hostname>.properties file should 
# exist under resources directory
# These properties should be mentioned in IDP's Configurator file, 
# i.e. SERVER_NAME1's Configurator file
# SERVER_NAME2 will be used as samlv2 SP. 
# idff_sp points to the SP where IDFF SP metadata will be hosted.
# wsfed_sp points to the SP where WSFed SP metadata will be hosted.
idff_sp=golden16
wsfed_sp=blackgate

# Certificate alias used for XML signing and encryption.
certalias=test

#
# Properties utilized by tests which use keystore configuration (WSS). These 
# properties become part of AMConfig.properties and used by client sdk.
#
# Location of the keystore file.
com.sun.identity.saml.xmlsig.keystore=

# Location of keypass file.
com.sun.identity.saml.xmlsig.keypass=

# Location of storepass file.
com.sun.identity.saml.xmlsig.storepass=

# Certificate alias used for XML signing and encryption.
com.sun.identity.saml.xmlsig.certalias=test

# Default certificate alias for issuing web service security token for this
# web service client
com.sun.identity.liberty.ws.wsc.certalias=test

# Client ceritificate alias that will be used in SSL connection for Liberty
# SOAP Binding
com.sun.identity.liberty.ws.soap.certalias=test

# Flag for checking the Certificate which is embedded in the
# KeyInfo against the certificates in the keystore (specified
# by the "com.sun.identity.saml.xmlsig.keystore" property).
# Possible values for the key are: on|off. If the flag is "on",
# the certification must be presented in the keystore for
# XML signature validation. If the flag is "off", skip
# the presence checking.
com.sun.identity.saml.checkcert=off

#
# XML signature algorithm. Used for SAML XML Signature generation and
# verification. When not specified, or value is empty, default value will be
# used. The following is the list of supported algorithms:
# http://www.w3.org/2000/09/xmldsig#rsa-sha1    (default)
# http://www.w3.org/2000/09/xmldsig#hmac-sha1
# http://www.w3.org/2000/09/xmldsig#dsa-sha1
# http://www.w3.org/2001/04/xmldsig-more#rsa-md5
# http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160
# http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
# http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
# http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
# http://www.w3.org/2001/04/xmldsig-more#hmac-md5
# http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160
# http://www.w3.org/2001/04/xmldsig-more#hmac-sha256
# http://www.w3.org/2001/04/xmldsig-more#hmac-sha384
# http://www.w3.org/2001/04/xmldsig-more#hmac-sha512
com.sun.identity.saml.xmlsig.xmlSigAlgorithm=http://www.w3.org/2000/09/xmldsig#rsa-sha1
#
# SAML2 XML Signing Certificate Validation.
com.sun.identity.saml2.crl.check=false

#
# SAML2 XML Signing Certificate Validation.
com.sun.identity.saml2.crl.check.ca=false

# Flag used internally by qatest. Not to be changed.
productSetupResult=pass

com.iplanet.security.SecureRandomFactoryImpl=com.iplanet.am.util.SecureRandomFactoryImpl
com.iplanet.security.SSLSocketFactoryImpl=netscape.ldap.factory.JSSESocketFactory

com.sun.identity.policy.client.resourceComparators=serviceType=iPlanetAMWebAgentService|class=com.sun.identity.policy.plugins.URLResourceName|wildcard=*|delimiter=/|caseSensitive=true
com.sun.identity.liberty.ws.security.TokenProviderImpl=com.sun.identity.liberty.ws.security.AMSecurityTokenProvider

# XML cannonicalization algorithm. Used for SAML XML signature generation
# and verification. When not specified, or value is empty, default value
# will be used. The following is the list of supported algorithms:
# http://www.w3.org/2001/10/xml-exc-c14n#       (default)
# http://www.w3.org/2001/10/xml-exc-c14n#WithComments
# http://www.w3.org/TR/2001/REC-xml-c14n-20010315
# http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments
com.sun.identity.saml.xmlsig.c14nMethod=http://www.w3.org/2001/10/xml-exc-c14n#

# XML transformation algorithm. Used for SAML XML signature generation
# and verification. When not specified, or value is empty, default value
# will be used. The following is the list of supported algorithms:
# http://www.w3.org/2001/10/xml-exc-c14n#      (default)
# http://www.w3.org/2001/10/xml-exc-c14n#WithComments
# http://www.w3.org/TR/2001/REC-xml-c14n-20010315
# http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments
# http://www.w3.org/TR/1999/REC-xslt-19991116
# http://www.w3.org/2000/09/xmldsig#base64
# http://www.w3.org/TR/1999/REC-xpath-19991116
# http://www.w3.org/2000/09/xmldsig#enveloped-signature
# http://www.w3.org/TR/2001/WD-xptr-20010108
# http://www.w3.org/2002/04/xmldsig-filter2
# http://www.w3.org/2002/06/xmldsig-filter2
# http://www.nue.et-inf.uni-siegen.de/~geuer-pollmann/#xpathFilter
com.sun.identity.saml.xmlsig.transformAlg=http://www.w3.org/2001/10/xml-exc-c14n#

# SAML2 XML Encryption Provider Implementation class
com.sun.identity.saml2.xmlenc.EncryptionProvider=com.sun.identity.saml2.xmlenc.FMEncProvider

# SAML2 XML Signing Provider Implementation class.
com.sun.identity.saml2.xmlsig.SignatureProvider=com.sun.identity.saml2.xmlsig.FMSigProvider

# If the message timestamp is before current timestamp by this amount
# (millisec), it is considered a stale message.
com.sun.identity.liberty.ws.soap.staleTimeLimit=300000

# All the messageID of a valid message will be stored in a cache with the it
# is received to avoid duplicate messages. If the current time minus the
# received time is greater than the above staleTimeLimit, it should be removed
# from the cache. The is property specify the interval(millisec) that a
# cleanup thread should check the cache and remove those messageID.
com.sun.identity.liberty.ws.soap.messageIDCacheCleanupInterval=60000

# Supported SOAP actors. Each actor must be seperated by '|'
com.sun.identity.liberty.ws.soap.supportedActors=http://schemas.xmlsoap.org/soap/actor/next

# Namespace prefix mapping used when marshalling a JAXB content tree to a
# DOM tree. The syntax is
# <prefix>=<namespace>|<prefix>=<namespace>|..........
com.sun.identity.liberty.ws.jaxb.namespacePrefixMappingList=S=http://schemas.xmlsoap.org/soap/envelope/|sb=urn:liberty:sb:2003-08|pp=urn:liberty:id-sis-pp:2003-08|ispp=http://www.sun.com/identity/liberty/pp|is=urn:liberty:is:2003-08

##########################################################################
# Don't change any one of the following properties unless it is required  
##########################################################################

# Refresh time for appssotoken, value in minutes
com.iplanet.am.client.appssotoken.refreshtime=3  

# Logging status
com.iplanet.am.logstatus=ACTIVE  

# SDK package name
com.iplanet.am.sdk.package=com.iplanet.am.sdk.remote

# Configure remote plugin classes for configuration (SMS)
com.sun.identity.sm.sms_object_class_name=com.sun.identity.sm.jaxrpc.SMSJAXRPCObject

# Encryption key that will be used to encrypt and decypt
# data used locally within the client.
com.sun.identity.client.encryptionKey=@ENCRYPTION_KEY_LOCAL@  

# Encryption: The key "com.iplanet.security.encryptor" specifies
# the encrypting class implementation.
# Available classes are:
#   com.iplanet.services.util.JCEEncryption
#   com.iplanet.services.util.JSSEncryption
com.iplanet.security.encryptor=com.iplanet.services.util.JCEEncryption

# Property to enable/disable the notifications for am.sdk and IdRepo Caches. 
# If set to "true" notifications are enabled and disabled if set to "false".
com.sun.identity.idm.remote.notification.enabled=true

# Cache update time (in minutes) for am.sdk & IdRepo Caches
# if notification URL is not provided or if notifications are disabled.
# Note: 
# 1. This property is applicable only if 
#   'com.sun.identity.client.notification.url'
#   is not provided or if 'com.sun.identity.idm.remote.notification.enabled'
#   is set to 'false'.
# 2. If the polling time is set as 0, then polling is disabled. 
com.iplanet.am.sdk.remote.pollingTime=1

# Property to enable/disable the notifications for service management caches.
# If set to "true" notifications are enabled and disabled if set to "false".
com.sun.identity.sm.notification.enabled=true

# Cache update time (in minutes) for service configutation data,
# if notification URL is not provided or if notifications are disabled.
# Note: 
# 1. This property is applicable only if 
#   'com.sun.identity.client.notification.url'
#   is not provided or if 'com.sun.identity.sm.notification.enabled' is 
#   set to 'false'.
# 2. If the cache time is set as 0, then no cache updates will occur.
com.sun.identity.sm.cacheTime=1  

# Server protocol, host and port to be used by Client Services
com.iplanet.am.console.protocol=@CONSOLE_PROTOCOL@  
com.iplanet.am.console.host=@CONSOLE_HOST@  
com.iplanet.am.console.port=@CONSOLE_PORT@  
com.iplanet.am.console.deploymentDescriptor=@CONSOLE_DEPLOY_URI@  
com.iplanet.am.console.remote=@CONSOLE_REMOTE@  

# Identify cert db directory path, prefix and password file
# to initialize JSS Socket Factory when Web Container is configured SSL
com.iplanet.am.admin.cli.certdb.dir=@CONTAINER_CERTDB_DIR@  
com.iplanet.am.admin.cli.certdb.prefix=@CONTAINER_CERTDB_PREFIX@  
com.iplanet.am.admin.cli.certdb.passfile=@BASEDIR@/@PRODUCT_DIR@/config/.wtpass  

# Identify property value for SSL ApprovalCallback / HostnameVerifier
# If com.iplanet.services.comm is configured as protocol handler
# and the checkSubjectAltName or resolveIPAddress feature is enabled, 
# cert8.db and key3.db with the prefix value of 
# com.iplanet.am.admin.cli.certdb.prefix will have to be created under 
# the directory of com.iplanet.am.admin.cli.certdb.dir before server is 
# restarted.
com.iplanet.am.jssproxy.trustAllServerCerts=false  
com.iplanet.am.jssproxy.checkSubjectAltName=false  
com.iplanet.am.jssproxy.resolveIPAddress=false  
com.iplanet.am.jssproxy.SSLTrustHostList=  

#################################################################
#              Policy Client parameters
#################################################################
# Policy decision log parameters. Possible values for logging.level
# are NONE, ALLOW, DENY, BOTH, and DECISION #
com.sun.identity.agents.server.log.file.name=amRemotePolicyLog  
com.sun.identity.agents.logging.level=ALLOW

# Notification URL for updating cache #
com.sun.identity.agents.notification.enabled=false  
com.sun.identity.agents.notification.url=@NOTIFICATION_URL@  

# Policy client clock skew value in seconds #
com.sun.identity.policy.client.clockSkew=10   

# Specify if allow to use cached data for HttpURLConnection 
com.sun.identity.urlconnection.useCache=false   

# Property to enable or disable to use the metro implementation
# for ws-trust client.
com.sun.identity.wss.trustclient.enablemetro=false  

# Property to use the SOAP version for ws-trust client. The containers
# that do not support JavaEE5 should use the version 1.1 but make sure that
# the STS service is compatible with 1.1 version. 
com.sun.identity.wss.soapversion=1.2  

# This property defines interval in seconds for web services security 
# cache timeout.
com.sun.identity.wss.security.cache.timeout.interval=300  

# This property defines an interval in seconds for cleaning up the
# web services security cache.
com.sun.identity.wss.security.cache.cleanup.interval=60  

# This property indicates a plugin class for WSSCacheRepository that can be
# used for storing web services security cache persistently.
com.sun.identity.wss.security.cacherepository.plugin=  

# This property is used by the standone SAML Tokens in web services security 
# for the issuer name. If this property is not set, they will use the server
# host name as the default.
com.sun.identity.wss.security.samlassertion.issuer= 

# Specify implementation class for
# com.sun.identity.plugin.configuration.ConfigurationInstance interface.
com.sun.identity.plugin.configuration.class=com.sun.identity.plugin.configuration.impl.ConfigurationInstanceImpl

# Specify implementation class for 
# com.sun.identity.plugin.datastore.DataStoreProvider interface.
# This property defines the default datastore provider.
com.sun.identity.plugin.datastore.class.default=com.sun.identity.plugin.datastore.impl.IdRepoDataStoreProvider

# Specify implementation class for
# com.sun.identity.plugin.session.SessionProvider interface.
com.sun.identity.plugin.session.class=com.sun.identity.plugin.session.impl.FMSessionProvider

# Specify XML signature provider class  
com.sun.identity.saml.xmlsig.signatureprovider.class=com.sun.identity.saml.xmlsig.AMSignatureProvider

# Specify XML key provider implementation class 
com.sun.identity.saml.xmlsig.keyprovider.class=com.sun.identity.saml.xmlsig.JKSKeyProvider

# Specify type of KeyStore used for saml xml signature. Default is JKS.
com.sun.identity.saml.xmlsig.storetype=JKS

# JAXB package list used when constructing JAXBContext. Each package must be
# seperated by ':'.
com.sun.identity.liberty.ws.jaxb.packageList=

# URL for WSPRedirectHandlerServlet to handle Liberty WSF WSP-resource owner
# interactions based on user agent redirects. This should be running in 
# the same JVM where Liberty SP is running
com.sun.identity.liberty.interaction.wspRedirectHandler=@SERVER_PROTOCOL@://@SERVER_HOST@:@SERVER_PORT@/@DEPLOY_URI@/WSPRedirectHandler

# indicates whether WSC would participate in interaction
# valid values are interactIfNeeded | doNotInteract | doNotInteractForData
# default value:interactIfNeeded
# value used if an invalid value is specified:interactIfNeeded
com.sun.identity.liberty.interaction.wscSpecifiedInteractionChoice=interactIfNeeded

# indicates whether WSC would include userInteractionHeader
# valid values are yes|no (case ignored)
# default value:yes
# value used if no value is specified:yes
com.sun.identity.liberty.interaction.wscWillInlcudeUserInteractionHeader=yes

# indicates whether WSC would redirect user for interaction
# valid values are yes|no
# default value:yes
# value used if no value is specified:yes
com.sun.identity.liberty.interaction.wscWillRedirect=yes

# WSC's preference on the acceptable duration for interaction(in seconds)
# default value if the value is not specified or a non integer value is
# specified : 60
com.sun.identity.liberty.interaction.wscSpecifiedMaxInteractionTime=80

# indicates whether WSC would enforce that redirected to URL is https
# valid values are yes|no (case ignored)
# liberty specification require the value to be yes
# default value:yes
# value used if no value is specified:yes
com.sun.identity.liberty.interaction.wscWillEnforceHttpsCheck=no

#
# This property is used to determine the Liberty identity web services framework
# to be used when the framework can not determine from the in-bound message or
# from the resource offering when AM is acting as the WSC.
# The default version is 1.1, but the possible values are 1.0 or 1.1
# com.sun.identity.liberty.wsf.version=1.1

# Web Services Security Client Properties
# Login URL and Authentication web service URL for WSS Liberty use cases
com.sun.identity.loginurl=@SERVER_PROTOCOL@://@SERVER_HOST@:@SERVER_PORT@/@DEPLOY_URI@/UI/Login
com.sun.identity.liberty.authnsvc.url=@SERVER_PROTOCOL@://@SERVER_HOST@:@SERVER_PORT@/@DEPLOY_URI@/Liberty/authnsvc

# STS End User Token Plugin class
com.sun.identity.wss.sts.clientusertoken=com.sun.identity.wss.sts.STSClientUserToken

# WSS Provider Configuration Plugin class
com.sun.identity.wss.provider.config.plugin=com.sun.identity.wss.provider.plugins.AgentProvider

# WSS Authenticator Plugin Class
com.sun.identity.wss.security.authenticator=com.sun.identity.wss.security.handler.DefaultAuthenticator

com.sun.identity.jsr196.authenticated.user=AUTHENTICATED_USERS

