<security-service activate-default-principal-to-role-mapping="false" anonymousrole="attributedeprecated"



Similar documents
>

Understanding Tomcat Security

Controlling which applications can access network resources and the Internet

Table of Contents 1 Configuring TallyShop for a Single-Site License Configuring TallyShop for a Multi-Site License... 3

SSO Plugin. Integration for Jasper Server. J System Solutions. Version 3.6

Eylean server deployment guide

Print Photo Class Roster Using Safari

This training module reviews the CRM home page called the Dashboard including: - Dashboard My Activities tab. - Dashboard Pipeline tab

How to integrate RSA ACE Server SecurID Authentication with Juniper Networks Secure Access SSL VPN (SA) with Single Node or Cluster (A/A or A/P)

Quick Guide For Using Spring Roo and Spring Security In Rapid Web Application Development:

Apache Tuscany RDB DAS

Configuring Secure Socket Layer (SSL) for use with BPM 7.5.x

Typed Resource Definitions

Galileo Desktop 2.4 Automated Installer

1. Introduction Auditing Handlers and Audit Trails Configure the Built-In Handler Create a Custom Audit Handler...

Bulk Downloader. Call Recording: Bulk Downloader

SMSEagle with SMS PASSCODE 8.0 SMS PASSCODE 2015

RSA SecurID Ready Implementation Guide

White Paper. Fabasoft app.test Load Testing. Fabasoft app.test 2015 Update Rollup 2. Fabasoft app.test Load Testing 1

Dove User Guide Copyright Virgil Trasca

Angel Dichev RIG, SAP Labs

ArcSight SIEM and data privacy best practices

Quick Note 038. Upgrade Software options and/or VPN Licenses on a Digi Transport router.

DMH remote access. Table of Contents. Project : remote_access_dmh Date: 29/05/12 pg. 1

Stripe. Chapters. Copyright. Authors. Stripe modules for oscommerce Online Merchant. oscommerce Online Merchant v2.3

Configuring iplanet 6.0 Web Server For SSL and non-ssl Redirect

EXAMPLES OF WORKFLOW RULES

Prevue Online How-To Guide Managing a Branch Account

RSA Security Analytics

Enable SSL for Apollo 2015

External Authentication with Juniper SSL VPN appliance Authenticating Users Using SecurAccess Server by SecurEnvoy

Create a Web Service from a Java Bean Test a Web Service using a generated test client and the Web Services Explorer

Event Log Summary Report

Purpose... 1 Overview... 1 Installation... 2 Configuration... 2 Using the Adapter... 3 Tips and Troubleshooting... 4 Known Issues... 4 Notes...

LATITUDE Patient Management System

MultiSite Manager. Setup Guide

Online Shop System Use Case Diagram Report (Demo)

SmarterMeasure Inbound Single Sign On (SSO) Version 1.3 Copyright 2010 SmarterServices, LLC / SmarterServices.com PO Box , Deatsville, AL 36022

Configuring Integration Between Multichannel and Salesforce.com

RSA Security Analytics Netflow Collection Configuration Guide

Setup The package simply needs to be installed and configured for the desired CDN s distribution server.

RSA Security Analytics Netflow Collection Configuration Guide

Magento Extension for Add Multiple Products by Capacity Web Solutions

xmlns:emcs=" xmlns:tms="

Building Clouds with OpenNebula 3.2

StreamLink 5.0. StreamLink Configuration XML Reference. November 2009 C O N F I D E N T I A L

Installing Autodesk Vault Server 2012 on Small Business Server 2008

ipad or iphone with Junos Pulse and Juniper SSL VPN appliance Authenticating Users Using SecurAccess Server by SecurEnvoy

Configuring Data Masking

How to setup your iphone client

Active Directory Backend Users. Installation Guide

Qualys API Release Notes

Week Overview. Running Live Linux Sending from command line scp and sftp utilities

How To Authenticate An Ssl Vpn With Libap On A Safeprocess On A Libp Server On A Fortigate On A Pc Or Ipad On A Ipad Or Ipa On A Macbook Or Ipod On A Network

Getting Started with your Hosted Microsoft Exchange 2010 Administrators Quick Start Guide to Hosted Exchange 2010

BASF D6Direct. User s Manual

Zendesk SSO with Cloud Secure using MobileIron MDM Server and Okta

Connecting with Free IP Call

CERTIFICATE-BASED SINGLE SIGN-ON FOR EMC MY DOCUMENTUM FOR MICROSOFT OUTLOOK USING CA SITEMINDER

Renewal of the Services

CYAN SECURE WEB HOWTO. NTLM Authentication

Lab 9 Access PreLab Copy the prelab folder, Lab09 PreLab9_Access_intro

How to Configure Web Authentication on a ProCurve Switch

How To Install Galaxy Desktop On A 64 Bit Computer (For A 64Bit) On A 32 Bit Computer Or Ipad Or Ipa (For An Ipa) On An Ipad (For Pc) Or Ipac (For Mac) On

NetSpective Certificate Guide

Application Notes. How to Configure UTM with Apple OSX and ios Devices for IPsec VPN

USING SSL/TLS WITH TERMINAL EMULATION

Xerox Supplies Recycling Program Instructions

Managed Security Web Portal USER GUIDE

Windows Hosting Documentation

ASSIST NOTIFICATIONS

webcrm API Getting Started

Univention Corporate Server. Extended domain services documentation

Oracle Fusion Middleware

How to configure HTTPS proxying in Zorp 5

Configuring Thunderbird with UEA Exchange 2007:

Spam Marshall SpamWall Step-by-Step Installation Guide for Exchange 5.5

Using LDAP Authentication in a PowerCenter Domain

LICENSE4J AUTO LICENSE GENERATION AND ACTIVATION SERVER USER GUIDE

Click Here -->>> Business Credit Building Course User Experience > Check Here <

How to move to your account with MAC Mail

Getting Started. A Getting Started Guide for Locum RealTime Monitor. Manual Version 2.1 LOCUM SOFTWARE SERVICES LIMITED

Ethernet 241 (USB/Serial) Quick Start Guide

How to Configure Algo 8180 Audio Alerter on the Quadro IP PBX

Fully Integrated, Automated Employee Time Clock

ProjectWise Mobile Access Server, Product Preview v1.1

JMETER - MONITOR TEST PLAN

HOW TO CREATE THEME IN MAGENTO 2

Citrix NetScaler Load Balancer Configuration

Microsoft Outlook Phone Set Up

MultiSite Manager. Setup Guide

Transcription:

<config dynamic-reconfiguration-enabled="true" name="server-config"> <http-service> <access-log format="%client.name% %auth-user-name% %datetime% %request% %status% %response.length%" rotation-enabled="true" rotation-interval-in-minutes="15" rotation-policy="time" rotation-suffix="yyyy-mm-dd"/> <http-listener acceptor-threads="1" address="0.0.0.0" blocking-enabled="false" default-virtual-server="server" enabled="true" family="inet" id="http-listener-1" port="8080" security-enabled="false" server-name="" xpowered-by="true"> <property name="proxiedprotocols" value="ws/tcp"/> </http-listener> <http-listener acceptor-threads="1" address="0.0.0.0" blocking-enabled="false" default-virtual-server="server" enabled="true" family="inet" id="http-listener-2" port="8181" security-enabled="true" server-name="" xpowered-by="true"> <ssl cert-nickname="s1as"/> </http-listener> <http-listener acceptor-threads="1" address="0.0.0.0" blocking-enabled="false" default-virtual-server=" asadmin" enabled="true" family="inet" id="admin-listener" port="6868" security-enabled="false" server-name="" xpowered-by="true"/> <virtual-server hosts="${com.sun.aas.hostname}" http-listeners="http-listener-1,httplistener-2"/network-listeners="http-listener-1, http-listener-2" id="server" logfile="${com.sun.aas.instanceroot}/logs/server.log" state="on"> <property name="docroot" value="${com.sun.aas.instanceroot}/docroot"/> <property name="accesslog" value="${com.sun.aas.instanceroot}/logs/access"/> <property name="sso-enabled" value="false"/> </virtual-server> <virtual-server hosts="${com.sun.aas.hostname}" http-listeners="adminlistener"/network-listeners="admin-listener" id=" asadmin" logfile="${com.sun.aas.instanceroot}/logs/server.log" state="on"> <property name="docroot" value="${com.sun.aas.instanceroot}/docroot"/> <property name="accesslog" value="${com.sun.aas.instanceroot}/logs/access"/> <property name="sso-enabled" value="false"/> </virtual-server> <request-processing header-buffer-length-in-bytes="8192" initial-thread-count="2" request-timeout-in-seconds="30" thread-count="5" thread-increment="1"/> <keep-alive max-connections="250" thread-count="1" timeout-in-seconds="30"/> <connection-pool max-pending-count="4096" queue-size-in-bytes="4096" receivebuffer-size-in-bytes="4096" send-buffer-size-in-bytes="8192"/> <http-protocol default-response-type="attributedeprecated" default-type="text/html; charset=iso-8859-1" dns-lookup-enabled="false" forced-responsetype="attributedeprecated" forced-type="text/html; charset=iso-8859-1" sslenabled="true" version="http/1.1"/>

<http-file-cache file-caching-enabled="true" file-transmission-enabled="false" globally-enabled="true" hash-init-size="0" max-age-in-seconds="30" max-filescount="1024" medium-file-size-limit-in-bytes="537600" medium-file-space-inbytes="10485760" small-file-size-limit-in-bytes="2048" small-file-space-inbytes="1048576"/> <property name="accessloggingenabled" value="false"/> </http-service> <iiop-service client-authentication-required="false"> <orb max-connections="1024" message-fragment-size="1024" use-thread-poolids="thread-pool-1"/> <iiop-listener address="0.0.0.0" enabled="true" id="orb-listener-1" port="3700" security-enabled="false" lazy-init="true"/> <iiop-listener address="0.0.0.0" enabled="true" id="ssl" port="3820" securityenabled="true"> <ssl cert-nickname="s1as" client-auth-enabled="false" ssl2-enabled="false" ssl3- enabled="true" tls-enabled="true" tls-rollback-enabled="true"/> </iiop-listener> <iiop-listener address="0.0.0.0" enabled="true" id="ssl_mutualauth" port="3920" security-enabled="true"> <ssl cert-nickname="s1as" client-auth-enabled="true" ssl2-enabled="false" ssl3- enabled="true" tls-enabled="true" tls-rollback-enabled="true"/> </iiop-listener> </iiop-service> <admin-service system-jmx-connector-name="system" type="das-and-server"> <!-- The JSR 160 "system-jmx-connector" --> <jmx-connector accept-all="false" address="0.0.0.0" auth-realm-name="adminrealm" enabled="true" name="system" port="8686" protocol="rmi_jrmp" securityenabled="false"> <ssl cert-nickname="s1as"/> <property name="client-hostname" value="moonbeam"/> </jmx-connector> <!-- The JSR 160 "system-jmx-connector" --> <das-config admin-session-timeout-in-minutes="60" autodeploydir="${com.sun.aas.instanceroot}/autodeploy" autodeploy-enabled="true" autodeployjsp-precompilation-enabled="false" autodeploy-polling-interval-in-seconds="2" autodeploy-verifier-enabled="false" deploy-xml-validation="full" dynamic-reloadenabled="true" dynamic-reload-poll-interval-in-seconds="2"/> <property name="adminconsolecontextroot" value="/admin" /> <property name="adminconsoledownloadlocation" value="$\ {com.sun.aas.installroot\}/lib/install/applications/admingui.war" />

<property name="ipsroot" value="$\{com.sun.aas.installroot\}/.." /> <property name="adminconsoleversion" value="" /> </admin-service> <connector-service /> <web-container> <session-config> <session-manager> <manager-properties/> <store-properties/> </session-manager> <session-properties/> </session-config> </web-container> <ejb-container cache-idle-timeout-in-seconds="600" cache-resize-quantity="32" commit-option="b" max-cache-size="512" max-pool-size="32" pool-idle-timeout-inseconds="600" pool-resize-quantity="8" removal-timeout-in-seconds="5400" sessionstore="${com.sun.aas.instanceroot}/session-store" steady-pool-size="0" victimselection-policy="nru"> <ejb-timer-service max-redeliveries="1" minimum-delivery-interval-in-millis="7000" redelivery-interval-internal-in-millis="5000"/> </ejb-container> <mdb-container idle-timeout-in-seconds="600" max-pool-size="32" pool-resizequantity="8" steady-pool-size="0"/> <jms-service addresslist-behavior="random" addresslist-iterations="3" default-jmshost="default_jms_host" init-timeout-in-seconds="60" reconnect-attempts="3" reconnect-enabled="true" reconnect-interval-in-seconds="5" type="embedded"> <jms-host admin-password="admin" admin-user-name="admin" host="moonbeam" name="default_jms_host" port="7676" lazy-init="true"/> </jms-service> <log-service alarms="false" file="${com.sun.aas.instanceroot}/logs/server.log" logrotation-limit-in-bytes="2000000" log-rotation-timelimit-in-minutes="0" log-toconsole="false" retain-error-statistics-for-hours="5" use-system-logging="false"> <module-log-levels admin="info" classloader="info" cmp="info" cmpcontainer="info" configuration="info" connector="info" corba="info" deployment="info" ejb-container="info" group-management-service="info" javamail="info" jaxr="info" jaxrpc="info" jdo="info" jms="info" jta="info" jts="info" management-event="info" mdb-container="info" naming="info" node-agent="info" resource-adapter="info" root="info" saaj="info" security="info" self-management="info" server="info" synchronization="info" util="info" verifier="info" web-container="info"/> </log-service>

<security-service activate-default-principal-to-role-mapping="false" anonymousrole="attributedeprecated" audit-enabled="false" audit-modules="default" defaultrealm="file" jacc="default"> <!-- All administrative users use this realm by default. --> <auth-realm classname="com.sun.enterprise.security.auth.realm.file.filerealm" name="admin-realm"> <property name="file" value="${com.sun.aas.instanceroot}/config/admin-keyfile"/> <property name="jaas-context" value="filerealm"/> </auth-realm> <!-- All administrative users use this realm by default. --> <auth-realm classname="com.sun.enterprise.security.auth.realm.file.filerealm" name="file"> <property name="file" value="${com.sun.aas.instanceroot}/config/keyfile"/> <property name="jaas-context" value="filerealm"/> </auth-realm> <auth-realm classname="com.sun.enterprise.security.auth.realm.certificate.certificaterealm" name="certificate"> </auth-realm> <jacc-provider name="default" policy-configuration-factoryprovider="com.sun.enterprise.security.provider.policyconfigurationfactoryimpl" policyprovider="com.sun.enterprise.security.provider.policywrapper"> <property name="repository" value="${com.sun.aas.instanceroot}/generated/policy"/> </jacc-provider> <jacc-provider policyprovider="com.sun.enterprise.security.jacc.provider.simplepolicyprovider" name="simple" policy-configuration-factoryprovider="com.sun.enterprise.security.jacc.provider.simplepolicyconfigurationfactory" /> <audit-module classname="com.sun.enterprise.security.audit" name="default"> <property name="auditon" value="false"/> </audit-module> <message-security-config auth-layer="soap"> <!-- turned off by default --> <provider-config classname="com.sun.xml.wss.provider.clientsecurityauthmodule" providerid="xws_clientprovider" provider-type="client"> <request-policy auth-source="content"/> <response-policy auth-source="content"/> <property name="encryption.key.alias" value="s1as"/>

<property name="signature.key.alias" value="s1as"/> <property name="dynamic.username.password" value="false"/> <property name="debug" value="false"/> </provider-config> <provider-config classname="com.sun.xml.wss.provider.clientsecurityauthmodule" providerid="clientprovider" provider-type="client"> <request-policy auth-source="content"/> <response-policy auth-source="content"/> <property name="encryption.key.alias" value="s1as"/> <property name="signature.key.alias" value="s1as"/> <property name="dynamic.username.password" value="false"/> <property name="debug" value="false"/> <property name="security.config" value="${com.sun.aas.instanceroot}/config/wss-server-config-1.0.xml"/> </provider-config> <provider-config classname="com.sun.xml.wss.provider.serversecurityauthmodule" providerid="xws_serverprovider" provider-type="server"> <request-policy auth-source="content"/> <response-policy auth-source="content"/> <property name="encryption.key.alias" value="s1as"/> <property name="signature.key.alias" value="s1as"/> <property name="debug" value="false"/> </provider-config> <provider-config classname="com.sun.xml.wss.provider.serversecurityauthmodule" providerid="serverprovider" provider-type="server"> <request-policy auth-source="content"/> <response-policy auth-source="content"/> <property name="encryption.key.alias" value="s1as"/> <property name="signature.key.alias" value="s1as"/> <property name="debug" value="false"/> <property name="security.config" value="${com.sun.aas.instanceroot}/config/wss-server-config-1.0.xml"/> </provider-config> </message-security-config> </security-service> <transaction-service automatic-recovery="false" heuristic-decision="rollback" keypoint-interval="65536" retry-timeout-in-seconds="600" timeout-in-seconds="0" txlog-dir="${com.sun.aas.instanceroot}/logs"/>

<monitoring-service> <module-monitoring-levels connector-connection-pool="off" connectorservice="off" ejb-container="off" http-service="off" jdbc-connection-pool="off" jms-service="off" jvm="off" orb="off" thread-pool="off" transactionservice="off" web-container="off"/> </monitoring-service> <diagnostic-service capture-app-dd="true" capture-hadb-info="true" capture-installlog="true" capture-system-info="true" compute-checksum="true" max-logentries="500" min-log-level="info" verify-config="true"/> <java-config classpath-suffix="" debug-enabled="false" debug-options="-xdebug - Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=9009" env-classpathignored="true" java-home="${com.sun.aas.javaroot}" javac-options="-g" rmicoptions="-iiop -poa -alwaysgenerate -keepgenerated -g" system-classpath=""> XX:MaxPermSize=192m</jvm-options> Djavax.management.builder.initial=com.sun.enterprise.ee.admin.AppServerMBeanServerBui options> Dcom.sun.appserv.pluggable.features=com.sun.enterprise.ee.server.pluggable.EEPluggableFe options> XX:+UnlockDiagnosticVMOptions</jvm-options> XX:+LogVMOutput</jvm-options> XX:LogFile=$\{com.sun.aas.instanceRoot\}/logs/jvm.log</jvm-options> Djava.endorsed.dirs=${com.sun.aas.installRoot}/lib/endorsed</jvmoptions> Djava.security.policy=${com.sun.aas.instanceRoot}/config/server.policy</jvm-options> Djava.security.auth.login.config=${com.sun.aas.instanceRoot}/config/login.conf</jvmoptions> Dcom.sun.enterprise.security.httpsOutboundKeyAlias=s1as</jvmoptions> Dsun.rmi.dgc.server.gcInterval=3600000</jvm-options> Dsun.rmi.dgc.client.gcInterval=3600000</jvm-options> Xmx512m</jvm-options> client</jvm-options> Djava.ext.dirs=${com.sun.aas.javaRoot}/lib/ext${path.separator}${com.sun.aas.javaRoot}/jr options> Djdbc.drivers=org.apache.derby.jdbc.ClientDriver</jvm-options> DANTLR_USE_DIRECT_CLASS_LOADING=true</jvm-options>

Dcom.sun.enterprise.config.config_environment_factory_class=com.sun.enterprise.config.ser options> Dcom.sun.enterprise.taglibs=appserv-jstl.jar,jsf-impl.jar</jvm-options> Dcom.sun.enterprise.taglisteners=jsf-impl.jar</jvm-options> Dosgi.shell.telnet.port=6666</jvm-options> Dosgi.shell.telnet.maxconn=1</jvm-options> Dosgi.shell.telnet.ip=127.0.0.1</jvm-options> Dfelix.fileinstall.dir=$\ {com.sun.aas.installroot\}/modules/autostart/</jvm-options> Dfelix.fileinstall.poll=5000</jvm-options> Dfelix.fileinstall.debug=1</jvm-options> Dfelix.fileinstall.bundles.new.start=true</jvm-options> Dorg.glassfish.web.rfc2109_cookie_names_enforced=false</jvmoptions> XX:NewRatio=2</jvm-options> Djavax.net.ssl.keyStore=${com.sun.aas.instanceRoot}/config/keystore.jks</jvmoptions> Djavax.net.ssl.trustStore=${com.sun.aas.instanceRoot}/config/cacerts.jks</jvm-options> </java-config> <network-config> <protocols> <protocol name="http-listener-1"> <http max-connections="250" default-virtual-server="server" server-name=""> <file-cache enabled="false" /> </http> </protocol> <protocol security-enabled="true" name="http-listener-2"> <http max-connections="250" default-virtual-server="server" server-name=""> <file-cache enabled="false" /> </http> <ssl ssl3-enabled="false" cert-nickname="s1as" /> </protocol> <protocol name="admin-listener"> <http max-connections="250" default-virtual-server=" asadmin" servername=""> <file-cache enabled="false" /> </http> </protocol>

</protocols> <network-listeners> <network-listener port="8080" protocol="http-listener-1" transport="tcp" name="http-listener-1" thread-pool="http-thread-pool" /> <network-listener port="8181" protocol="http-listener-2" transport="tcp" name="http-listener-2" thread-pool="http-thread-pool" /> <network-listener port="4848" protocol="admin-listener" transport="tcp" name="admin-listener" thread-pool="http-thread-pool" /> </network-listeners> <transports> <transport name="tcp" /> </transports> </network-config> <thread-pools> <thread-pool name="http-thread-pool" /> <thread-pool idle-thread-timeout-in-seconds="120" max-thread-pool-size="200" min-thread-pool-size="0" num-work-queues="1" thread-pool-id="thread-pool- 1"/name="thread-pool-1"/> </thread-pools> <management-rules enabled="true"> </management-rules> </config> <!-- config model with name "server-config" ends -->