|
| 1 | +<!-- |
| 2 | +
|
| 3 | + Copyright (c) 2010, 2018 Oracle and/or its affiliates. All rights reserved. |
| 4 | + Copyright (c) 2019 Fujitsu Limited. |
| 5 | +
|
| 6 | + This program and the accompanying materials are made available under the |
| 7 | + terms of the Eclipse Public License v. 2.0, which is available at |
| 8 | + http://www.eclipse.org/legal/epl-2.0. |
| 9 | +
|
| 10 | + This Source Code may also be made available under the following Secondary |
| 11 | + Licenses when the conditions for such availability set forth in the |
| 12 | + Eclipse Public License v. 2.0 are satisfied: GNU General Public License, |
| 13 | + version 2 with the GNU Classpath Exception, which is available at |
| 14 | + https://www.gnu.org/software/classpath/license.html. |
| 15 | +
|
| 16 | + SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0 |
| 17 | +
|
| 18 | +--> |
| 19 | + |
| 20 | +<domain log-root="${com.sun.aas.instanceRoot}/logs" application-root="${com.sun.aas.instanceRoot}/applications" version="10.0"> |
| 21 | + <security-configurations> |
| 22 | + <authorization-service default="true" name="authorizationService"> |
| 23 | + <security-provider name="simpleAuthorization" type="Simple" provider-name="simpleAuthorizationProvider"> |
| 24 | + <authorization-provider-config support-policy-deploy="false" name="simpleAuthorizationProviderConfig"></authorization-provider-config> |
| 25 | + </security-provider> |
| 26 | + </authorization-service> |
| 27 | + </security-configurations> |
| 28 | + <system-applications/> |
| 29 | + <applications/> |
| 30 | + <resources> |
| 31 | + <jdbc-resource pool-name="__TimerPool" jndi-name="jdbc/__TimerPool" object-type="system-admin"/> |
| 32 | + <jdbc-resource pool-name="DerbyPool" jndi-name="jdbc/__default" object-type="system-all"/> |
| 33 | + <jdbc-connection-pool name="__TimerPool" datasource-classname="org.apache.derby.jdbc.EmbeddedXADataSource" res-type="javax.sql.XADataSource"> |
| 34 | + <property value="${com.sun.aas.instanceRoot}/lib/databases/ejbtimer" name="databaseName"/> |
| 35 | + <property value=";create=true" name="connectionAttributes"/> |
| 36 | + </jdbc-connection-pool> |
| 37 | + <jdbc-connection-pool is-isolation-level-guaranteed="false" name="DerbyPool" datasource-classname="org.apache.derby.jdbc.EmbeddedDataSource" res-type="javax.sql.DataSource"> |
| 38 | + <property name="databaseName" value="${com.sun.aas.instanceRoot}/lib/databases/embedded_default"/> |
| 39 | + <property name="connectionAttributes" value=";create=true"/> |
| 40 | + </jdbc-connection-pool> |
| 41 | + </resources> |
| 42 | + <servers> |
| 43 | + <server name="server" config-ref="server-config"> |
| 44 | + <resource-ref ref="jdbc/__TimerPool"/> |
| 45 | + <resource-ref ref="jdbc/__default"/> |
| 46 | + </server> |
| 47 | + </servers> |
| 48 | + <configs> |
| 49 | + <config name="server-config"> |
| 50 | + <http-service> |
| 51 | + <access-log rotation-interval-in-minutes="15" rotation-suffix="yyyy-MM-dd"/> |
| 52 | + <virtual-server id="server" network-listeners="http-listener, https-listener"/> |
| 53 | + </http-service> |
| 54 | + <admin-service type="das-and-server" system-jmx-connector-name="system"> |
| 55 | + <jmx-connector enabled="false" auth-realm-name="admin-realm" security-enabled="false" address="0.0.0.0" port="8686" name="system"/> |
| 56 | + <das-config autodeploy-enabled="false" dynamic-reload-enabled="true" deploy-xml-validation="full" autodeploy-dir="${com.sun.aas.instanceRoot}/autodeploy"/> |
| 57 | + <property value="/admin" name="adminConsoleContextRoot"/> |
| 58 | + <property value="${com.sun.aas.installRoot}/lib/install/applications/admingui.war" name="adminConsoleDownloadLocation"/> |
| 59 | + <property value="${com.sun.aas.installRoot}/.." name="ipsRoot"/> |
| 60 | + </admin-service> |
| 61 | + <connector-service shutdown-timeout-in-seconds="30"> |
| 62 | + </connector-service> |
| 63 | + <ejb-container steady-pool-size="0" max-pool-size="32" session-store="${com.sun.aas.instanceRoot}/session-store" pool-resize-quantity="8"> |
| 64 | + <ejb-timer-service/> |
| 65 | + </ejb-container> |
| 66 | + <mdb-container steady-pool-size="0" max-pool-size="32" pool-resize-quantity="8"> |
| 67 | + </mdb-container> |
| 68 | + <log-service file="${com.sun.aas.instanceRoot}/logs/server.log" log-rotation-limit-in-bytes="2000000"> |
| 69 | + <module-log-levels/> |
| 70 | + </log-service> |
| 71 | + <security-service activate-default-principal-to-role-mapping="true" jacc="simple"> |
| 72 | + <auth-realm classname="com.sun.enterprise.security.auth.realm.file.FileRealm" name="admin-realm"> |
| 73 | + <property value="${com.sun.aas.instanceRoot}/config/admin-keyfile" name="file"/> |
| 74 | + <property value="fileRealm" name="jaas-context"/> |
| 75 | + </auth-realm> |
| 76 | + <auth-realm classname="com.sun.enterprise.security.auth.realm.file.FileRealm" name="file"> |
| 77 | + <property value="${com.sun.aas.instanceRoot}/config/keyfile" name="file"/> |
| 78 | + <property value="fileRealm" name="jaas-context"/> |
| 79 | + </auth-realm> |
| 80 | + <auth-realm classname="com.sun.enterprise.security.auth.realm.certificate.CertificateRealm" name="certificate"/> |
| 81 | + <jacc-provider policy-configuration-factory-provider="com.sun.enterprise.security.provider.PolicyConfigurationFactoryImpl" policy-provider="com.sun.enterprise.security.provider.PolicyWrapper" name="default"> |
| 82 | + <property value="${com.sun.aas.instanceRoot}/generated/policy" name="repository"/> |
| 83 | + </jacc-provider> |
| 84 | + <jacc-provider policy-configuration-factory-provider="com.sun.enterprise.security.jacc.provider.SimplePolicyConfigurationFactory" policy-provider="com.sun.enterprise.security.jacc.provider.SimplePolicyProvider" name="simple"/> |
| 85 | + <audit-module classname="com.sun.enterprise.security.ee.Audit" name="default"> |
| 86 | + <property value="false" name="auditOn"/> |
| 87 | + </audit-module> |
| 88 | + <message-security-config auth-layer="SOAP"> |
| 89 | + <provider-config provider-id="XWS_ClientProvider" class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule" provider-type="client"> |
| 90 | + <request-policy auth-source="content"/> |
| 91 | + <response-policy auth-source="content"/> |
| 92 | + <property value="s1as" name="encryption.key.alias"/> |
| 93 | + <property value="s1as" name="signature.key.alias"/> |
| 94 | + <property value="false" name="dynamic.username.password"/> |
| 95 | + <property value="false" name="debug"/> |
| 96 | + </provider-config> |
| 97 | + <provider-config provider-id="ClientProvider" class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule" provider-type="client"> |
| 98 | + <request-policy auth-source="content"/> |
| 99 | + <response-policy auth-source="content"/> |
| 100 | + <property value="s1as" name="encryption.key.alias"/> |
| 101 | + <property value="s1as" name="signature.key.alias"/> |
| 102 | + <property value="false" name="dynamic.username.password"/> |
| 103 | + <property value="false" name="debug"/> |
| 104 | + <property value="${com.sun.aas.instanceRoot}/config/wss-server-config-1.0.xml" name="security.config"/> |
| 105 | + </provider-config> |
| 106 | + <provider-config provider-id="XWS_ServerProvider" class-name="com.sun.xml.wss.provider.ServerSecurityAuthModule" provider-type="server"> |
| 107 | + <request-policy auth-source="content"/> |
| 108 | + <response-policy auth-source="content"/> |
| 109 | + <property value="s1as" name="encryption.key.alias"/> |
| 110 | + <property value="s1as" name="signature.key.alias"/> |
| 111 | + <property value="false" name="debug"/> |
| 112 | + </provider-config> |
| 113 | + <provider-config provider-id="ServerProvider" class-name="com.sun.xml.wss.provider.ServerSecurityAuthModule" provider-type="server"> |
| 114 | + <request-policy auth-source="content"/> |
| 115 | + <response-policy auth-source="content"/> |
| 116 | + <property value="s1as" name="encryption.key.alias"/> |
| 117 | + <property value="s1as" name="signature.key.alias"/> |
| 118 | + <property value="false" name="debug"/> |
| 119 | + <property value="${com.sun.aas.instanceRoot}/config/wss-server-config-1.0.xml" name="security.config"/> |
| 120 | + </provider-config> |
| 121 | + </message-security-config> |
| 122 | + <property value="SHA-256" name="default-digest-algorithm"/> |
| 123 | + </security-service> |
| 124 | + <monitoring-service> |
| 125 | + <module-monitoring-levels/> |
| 126 | + </monitoring-service> |
| 127 | + <transaction-service tx-log-dir="${com.sun.aas.instanceRoot}/logs"> |
| 128 | + </transaction-service> |
| 129 | + <java-config> |
| 130 | + <jvm-options>-Djavax.net.ssl.keyStore=${com.sun.aas.instanceRoot}/config/keystore.jks</jvm-options> |
| 131 | + <jvm-options>-Djavax.net.ssl.trustStore=${com.sun.aas.instanceRoot}/config/cacerts.jks</jvm-options> |
| 132 | + <jvm-options>-Dorg.glassfish.jms.InitializeOnDemand=true</jvm-options> |
| 133 | + </java-config> |
| 134 | + <network-config> |
| 135 | + <protocols> |
| 136 | + <protocol name="http-listener"> |
| 137 | + <http default-virtual-server="server" max-connections="250"> |
| 138 | + <file-cache enabled="false"></file-cache> |
| 139 | + </http> |
| 140 | + </protocol> |
| 141 | + <protocol security-enabled="true" name="https-listener"> |
| 142 | + <http default-virtual-server="server" max-connections="250"> |
| 143 | + <file-cache enabled="false"></file-cache> |
| 144 | + </http> |
| 145 | + <ssl classname="com.sun.enterprise.security.ssl.GlassfishSSLImpl" ssl3-enabled="false" cert-nickname="s1as"></ssl> |
| 146 | + </protocol> |
| 147 | + </protocols> |
| 148 | + <network-listeners> |
| 149 | + <network-listener port="8080" protocol="http-listener" transport="tcp" name="http-listener" thread-pool="http-thread-pool" enabled="true"/> |
| 150 | + <network-listener port="8181" protocol="https-listener" transport="tcp" name="https-listener" thread-pool="http-thread-pool" enabled="true"/> |
| 151 | + </network-listeners> |
| 152 | + <transports> |
| 153 | + <transport name="tcp"></transport> |
| 154 | + </transports> |
| 155 | + </network-config> |
| 156 | + <thread-pools> |
| 157 | + <thread-pool name="http-thread-pool" max-thread-pool-size="64"/> |
| 158 | + <thread-pool name="thread-pool-1" max-thread-pool-size="200"/> |
| 159 | + </thread-pools> |
| 160 | + </config> |
| 161 | + </configs> |
| 162 | + <property name="administrative.domain.name" value="domain1"/> |
| 163 | + <secure-admin> |
| 164 | + <secure-admin-principal dn="CN=localhost,OU=Launcher,O=Fujitsu Limited"/> |
| 165 | + <secure-admin-principal dn="CN=localhost-instance,OU=Launcher,O=Fujitsu Limited"/> |
| 166 | + </secure-admin> |
| 167 | +</domain> |
0 commit comments