# # This is the properties file used by the Java API samples. # Change values as appropriate. # PS_IP = 127.0.0.1 PS_CONMIN = 1 PS_CONMAX = 3 PS_CONSTEP = 1 PS_TIMEOUT = 75 PS_AUPORT = 44442 PS_AZPORT = 44443 PS_ACPORT = 44441 AGENT_NAME = jsdk AGENT_SECRET = secret AGENT_IP = 127.0.0.1 ENCRYPTED_AGENT_NAME = 84rf5ppaCP/hp84s9sS7Zg9BjRE2dO3ENu2q++CuY4Io1FJ8jm1XwEcfCw2imxWM ADMIN_NAME = SiteMinder ADMIN_PWD = password USER_NAME = user1 USER_PWD = user1 CHALLENGE_USER_NAME = user2 CHALLENGE_USER_PWD = user2 LOGFILE_NAME = smjsdksample.log LOGGING_DETAIL = false AGENTGUID_FILE = AgentGUID.conf # # smdif file name for export # EXPORT_FILENAME = Export.smdif # # smdif file name for import # IMPORT_FILENAME = Import.smdif # # Host Conf Object to be created in Policy Server # Separate multiple policyservers by semicolon (;) # POLICYSERVERLIST = 127.0.0.1,44442,44441,44443;127.0.0.1,44442,444441,44443 CLUSTERS = 127.0.0.1,44442;127.0.0.1,44441:127.0.0.1,44443 FAILOVERTHRESHOLD = 75 ENABLEFAILOVER = 1 MAXSOCKETSPERPORT = 20 MINSOCKETSPERPORT = 2 NEWSOCKETSTEP = 2 REQUESTTIMEOUT = 60 # # Trusted Host to be registered in Policy Server # HOSTCONFPATH = ../../bin/ HOSTCONFIGFILE = SmHost.conf ENABLEROLLOVER = 1 # # For Agent Config : The encryption flag value. # If 1, the name/value pair is stored in encrypted format. # If 0, storage is in plain text. # ENCRYPTED = 1 # # LDAP User Directory to be created in the Policy Store # LDAP_USERDIR_USECREDS = 1 LDAP_USERDIR_CREDS_USERNAME = cn=Directory Manager LDAP_USERDIR_CREDS_PWD = password LDAP_USERDIR_IP = 127.0.0.1 LDAP_USERDIR_SRCH_ROOT = o=mycompany.com LDAP_USERDIR_LKUPSTRT = (&(uid= LDAP_USERDIR_LKUPEND = )(objectclass=*)) LDAP_SEARCH_RESULTS = 50 LDAP_SEARCH_SCOPE = 2 LDAP_SEARCH_TIMEOUT = 45 LDAP_UID_ATTR = uid LDAP_DISABLED_ATTR = carLicense LDAP_PASSWORD_ATTR = userPassword LDAP_PASSWORD_DATA_ATTR = audio # An example search filter to use in some tests LDAP_SEARCH_FILTER = (&(objectclass=organizationalUnit)(ou=groups)) # # Realm to be created in the Policy Store # REALM_RESOURCE_FILTER = /resfilter/ REALM_IDLE_TIMEOUT = 3600 REALM_MAX_TIMEOUT = 5400 # # Resource to be tested against # RESOURCE_NAME = /resfilter/private.html # # Rule to be created in the Policy Store # RULE_ACTIVE_EXPRESSION = RULE_END_YEAR = 2010 RULE_END_MONTH = 6 RULE_END_DAY = 1 # # Policy to be created in the Policy Store # POLICY_FILTER_PATH = ou=People,o=mycompany.com POLICY_FILTER_CLASS = organizationalunit POLICY_ACTIVE_EXPRESSION = POLICY_END_YEAR = 2010 POLICY_END_MONTH = 6 POLICY_END_DAY = 1 # Policy resolution depends on the chosen directory object # as defined in POLICY_FILTER_PATH and POLICY_FILTER_CLASS. # # Choose one of the following: # # To indicate that the policy object is the specified user object: #POLICY_RESOLUTION = 1 # To indicate that the policy object is a member of the specified user group object: #POLICY_RESOLUTION = 2 # To indicate that the policy object matches the specified filter: #POLICY_RESOLUTION = 3 # To indicate that the policy object is the occupant of the specified role: #POLICY_RESOLUTION = 4 # To indicate that the policy object is a member of the specified organization object: POLICY_RESOLUTION = 5 # To indicate that the policy object is contained in the result set of a directory-specific query: #POLICY_RESOLUTION = 6 # To indicate that the policy object is located in the specified directory: #POLICY_RESOLUTION = 7 # To indicate that the policy object is policy-related to a "group"-like DN matching the specified filter: #POLICY_RESOLUTION = 8 # To indicate that the policy object is policy-related to a "org"-like DN matching the specified filter: #POLICY_RESOLUTION = 9 # To indicate that the policy object is policy-related to any DN matching the specified filter: #POLICY_RESOLUTION = 10 # # SQL Query Scheme to be created in the Policy Store # ODBC_PROP_AUTHENTICATEUSER = select Name from SmUser where Name = '%s' and Password = '%s' ODBC_PROP_ENUMERATE = select Name, 'Group' as Class from SmGroup order by Class ODBC_PROP_GETGROUPPROP = select %s from SmGroup where Name = '%s' ODBC_PROP_GETGROUPPROPS = Name, GroupID ODBC_PROP_GETGROUPS = select SmGroup.Name from SmGroup, SmUser, SmUserGroup where SmUser.Name = '%s' and SmUser.UserID = SmUserGroup.UserID and SmGroup.GroupID = SmUserGroup.GroupID ODBC_PROP_GETOBJINFO = select Name, 'User' from SmUser where Name = '%s' Union select Name, 'Group' from SmGroup where Name = '%s' ODBC_PROP_GETUSERPROP = select %s from SmUser where Name = '%s' ODBC_PROP_GETUSERPROPS = Name, UserID, FirstName, LastName, TelephoneNumber, EmailAddress, Disabled, PIN, Mileage, PasswordData ODBC_PROP_INITUSER = select Name from SmUser where Name = '%s' ODBC_PROP_QUERY_ISGROUPMEMBER = select ID from SmUserGroup where UserID = (select UserID from SmUser where Name = '%s') and GroupID = (select GroupID from SmGroup where Name = '%s') ODBC_PROP_LOOKUP = select Name, 'User' as Class from SmUser where Name %s Union select Name, 'Group' as Class from SmGroup where Name %s order by Class ODBC_PROP_LOOKUPGROUP = select Name, 'Group' as Class from SmGroup where %s ODBC_PROP_LOOKUPUSER = select Name, 'User' as Class from SmUser where %s ODBC_PROP_SETGROUPPROP = update SmGroup set %s = %s where Name = '%s' ODBC_PROP_SETPASSWORD = update SmUser set Password = '%s' where Name = '%s' ODBC_PROP_SETUSERPROP = update SmUser set %s = '%s' where Name = '%s' # # Registration Scheme to be created in the Policy Store # REG_REGISTRATION_URL = http://www.my-company.com/registerusers.jsp REG_TEMPLATE_PATH = /siteminderagent/selfreg REG_WORKFLOW_LIB = # # Password Policy to be created in the Policy Store # PWD_DICTIONARY_NAME = Password Dictionary Name PWD_DICTIONARY_PARTIAL = 10 PWD_EXPIRATION_DELAY = 60 PWD_FILTER_CLASS = organizationalUnit PWD_FILTER_PATH = ou=Groups, o=myorg.org PWD_LOGIN_DAYS_GRACE = 5 PWD_LOGIN_INACTIVITY_WARN = 30 PWD_LOGIN_MAX_FAILURES = 3 PWD_LOGIN_MAX_INACTIVITY = 30 PWD_PASSWORD_MAX_LENGTH = 15 PWD_PASSWORD_MAX_REPEAT = 3 PWD_PASSWORD_MIN_ALPHA = 2 PWD_PASSWORD_MIN_ALPHANUM = 3 PWD_PASSWORD_MIN_LENGTH = 6 PWD_PASSWORD_MIN_NONALPHA = 5 PWD_PASSWORD_MIN_NONPRINTABLE = 0 PWD_PASSWORD_MIN_NUMBERS = 2 PWD_PASSWORD_MIN_PUNCTUATION = 0 PWD_PASSWORD_PERCENT_DIFF = 25 PWD_PASSWORD_PERCENT_SEQUENCE = 25 PWD_PASSWORD_REUSE_COUNT = 2 PWD_PASSWORD_REUSE_DELAY = 2 PWD_PASSWORD_SRVCS_REDIRECT = http://www.myorg.org/change.jsp PWD_PASSWORD_SPECIALS_LENGTH = 2 PWD_REENABLEMENT = 5 PWD_RESOLUTION = 0 # # Certificate Mapping to be created in the Policy Store # CERT_ISSUER_DN = cn=SampleIssuerDN CERT_MAP_ATTR = %{uid} CERT_CADN = cadn # # Literal strings # STATUS_OK = \tSUCCESS STATUS_NOK = \tFAIL OBJNAME_PREFIX = jsdksample- SAMPLE_DESC = Java SDK Sample POLICYAPI_HEADER = >>>>>>> SiteMinder Java Policy Management API Sample <<<<<<< MIGRATION_HEADER = >>>>>>>> SiteMinder Java Policy Migration API Sample <<<<<<< AGENTAPI_HEADER = >>>>>>>>>>>>> SiteMinder Java Agent API Sample <<<<<<<<<<<<< DMSAPI_HEADER = >>>>>>>>>>>>>> SiteMinder Java DMS API Sample <<<<<<<<<<<<<< DIRCONTEXT_HEADER = >>>>>>>>>>>>>>>>>>>>> Directory Context <<<<<<<<<<<<<<<<<<<< DMSCONTEXT_HEADER = >>>>>>>>>>>>>>>>>>>>>>>> DMS Context <<<<<<<<<<<<<<<<<<<<<<< SAMPLE_FOOTER = >>>>>>>>>>>>>>>>>>>>>>>>>>>> End <<<<<<<<<<<<<<<<<<<<<<<<<<< SECTION_SEPARATOR = ______________________________________________________________ # # Java Policy Management API sample literal strings # ATTEMPT_CONNECT = Establishing connection to Policy Server...........: ATTEMPT_AUTHADMIN = Authenticating SiteMinder Administrator............: INIT_POLICY_STORE = Initializing Policy Store..........................: CREATE_ADMIN = Creating Administrator.............................: CREATE_AGENT = Creating Agent.....................................: CREATE_AGENTGROUP = Creating Agent Group...............................: CREATE_AGENTCONFIG = Creating Agent Config Object.......................: CREATE_HOSTCONFIG = Creating Host Config Object........................: CREATE_TRUSTEDHOST = Creating Trusted Host..............................: CREATE_AUTHSCHEME = Creating Authentication Scheme.....................: CREATE_LDAPUSERDIR = Creating LDAP User Directory.......................: CREATE_DOMAIN = Creating Domain....................................: CREATE_REGSCHEME = Creating Registration Scheme.......................: CREATE_PASSWDPOLICY = Creating Password Policy...........................: CREATE_SQLSCHEME = Creating SQL Query Scheme..........................: CREATE_CERTMAP = Creating Certificate Mapping.......................: CREATE_AUTHAZMAP = Creating Directory Mapping.........................: CREATE_REALM = Creating Realm.....................................: CREATE_RULE = Creating Rule......................................: CREATE_RULEGROUP = Creating Rule Group................................: CREATE_RESPONSE = Creating Response..................................: CREATE_RESPONSEGROUP = Creating Response Group............................: CREATE_POLICY = Creating Policy....................................: CREATE_RESPONSEATTRS = Creating Response Attributes.......................: CREATE_VARIABLE = Creating Variable..................................: CREATE_HEADER_VARIABLE = \tWebAgent-HTTP-Header-Variable..............: CREATE_COOKIE_VARIABLE = \tWebAgent-HTTP-Cookie-Variable..............: CREATE_ONACCEPT_REDIRECT = \tWebAgent-OnAccept-Redirect.................: CREATE_ONACCEPT_TEXT = \tWebAgent-OnAccept-Text.....................: CREATE_ONACCEPT_IDLE = \tWebAgent-OnAuthAccept-Session-Idle-Timeout.: CREATE_ONACCEPT_MAX = \tWebAgent-OnAuthAccept-Session-Max-Timeout..: CREATE_ONREJECT_REDIRECT = \tWebAgent-OnReject-Redirect.................: CREATE_ONREJECT_TEXT = \tWebAgent-OnReject-Text.....................: ADD_USERDIR_TO_DOMAIN = Associating User Directory with Domain.............: ADD_ADMIN_TO_DOMAIN = Associating Admin with Domain......................: ADD_AGENT_TO_GROUP = Adding Agent to Agent Group........................: ADD_RULE_TO_GROUP = Adding Rule to Rule Group..........................: ADD_RESPONSE_TO_GROUP = Adding response to Response Group..................: MODIFY_AGENT = Modifying Agent....................................: MODIFY_AGENTCONFIG = Modifying Agent Config Object......................: MODIFY_HOSTCONFIG = Modifying Host Config Object.......................: GET_AGENT = Fetching Agent.....................................: GET_AGENTCONFIG = Fetching Agent Config Object.......................: GET_HOSTCONFIG = Fetching Host Config Object........................: GET_RULE = Fetching Rule......................................: GET_RESPONSE = Fetching Response..................................: GET_VARIABLETYPES = Fetching Variable Types ...........................: GET_SHARED_SECRET = Getting Shared Secret Policy.......................: GET_KEYMANAGEMENT = Getting Key Management.............................: MODIFY_RULE = Modifying Rule.....................................: MODIFY_RESPONSE = Modifying Response ................................: MODIFY_NESTEDSECURITY = Modifying Nested Security..........................: MODIFY_ADENHANCED = Modifying ADEnhanced...............................: MODIFY_SHARED_SECRET = Modifying Shared Secret............................: MODIFY_KEYMANAGEMENT = Modifying Key Management...........................: ROLL_OVER_SHARED_SECRET = Roll over Shared Secret Key........................: FAILED_CONNECT = Failed trying to connect to the Policy Server. Ensure that the Agent Name and Shared Secret in smjsdkexample.properties matches that of a pre-existing agent in the Policy Store. FAILED_AUTHADMIN = Failed to authenticate Admin FAILED_LOCALHOST = Unable to get localhost name FAILED_GET_REALM = Failed to get realm while trying to create policy link FAILED_GET_RULE = Failed to get rule while trying to create policy link FAILED_POLICY_LINK = Failed to create policy link FAILED_GET_RESPONSE = Failed to get response for setting in policy link FAILED_SET_RESPONSE = Failed to set response in policy link # Java IMS Policy Management API sample literal strings # ADD_IMS_ENV_TO_DOMAIN_FIRST_HALF = Adding ADD_IMS_ENV_TO_DOMAIN_SECOND_HALF = IMS Environment to the domain......: GET_GLOBAL_IMS_ENVS = Fetching Global IMS Environment Objects............: GET_DOMAIN_IMS_ENVS = Fetching IMS Environments under the domain.........: GET_IMS_ENVS_DESC = Fetching IMS Environment properties ...............: GET_IMS_ENV_NAME = neteauto REM_IMS_ENV_FROM_DOMAIN_FIRST_HALF = Removing REM_IMS_ENV_FROM_DOMAIN_SECOND_HALF= IMS Environment from the domain..: REM_DOMAIN = Removing already existing domain...................: # # Java Policy Migration API sample literal strings # EXE_EXPORT = Executing Export...................................: EXE_IMPORT = Executing Import...................................: # # Java Agent API sample literal strings # AGENTAPI_INIT = ++ Initialization ++ AGENTAPI_DOMANAGEMENT = ++ DoManagement ++ AGENTAPI_AGENTINSINFO = ++ SetAgentInstanceInfo ++ AGENTAPI_ISPROTECTED = ++ IsProtected ++ AGENTAPI_AUTHENTICATE = ++ Authentication ++ AGENTAPI_AUTHENTICATE_AUTHCHAIN = ++ Authentication ( Using Authchain ) ++ AGENTAPI_ISAUTHORIZED = ++ Authorization ++ AGENTAPI_SSO_TOKEN = ++ SSO Token ++ AGENTAPI_CLEANUP = ++ Cleanup ++ AGENTAPI_PS_IP = Policy Server IP Address.................:\t AGENTAPI_AGENT_IP = Agent IP Address.........................:\t AGENTAPI_AGENT_NAME = Agent Name...............................:\t AGENTAPI_AGENT_SECRET = Agent Shared Secret......................:\t AGENTAPI_AGENT_INFO = DoManagement (SET_AGENT_INFO)............:\t AGENTAPI_AGENT_CMDS = DoManagement (GET_AGENT_COMMANDS)........:\t AGENTAPI_AGENT_INS_INFO= DoManagement (SET_AGENT_INSTANCE_INFO)...:\t AGENTAPI_ATTRIBUTES = Attributes...............................:\t AGENTAPI_ATTRS_UPDATE = Attributes after update..................:\t AGENTAPI_RESOURCE = Resource Name............................:\t AGENTAPI_ACTION = Action...................................:\t AGENTAPI_ISPROT_RET = IsProtected..............................:\t AGENTAPI_ISPROT_YES = (Resource is Protected) AGENTAPI_ISPROT_NO = (Resource is NOT Protected) AGENTAPI_REALM_NAME = Realm Name...............................:\t AGENTAPI_REALM_OID = Realm OID................................:\t AGENTAPI_LOGIN = Login....................................:\t AGENTAPI_SESSION_ID = Session ID...............................:\t AGENTAPI_SESSION_SPEC = Session Spec.............................:\t AGENTAPI_SESSION_TOKEN = Session Token............................:\t AGENTAPI_ISAUTHOR_RET = Authorized...............................:\t AGENTAPI_CREATE_TOKEN = Create SSO Token.........................:\t AGENTAPI_DECODE_TOKEN = Decode SSO Token.........................:\t AGENTAPI_UPDATE_TOKEN = Update SSO Token.........................:\t AGENTAPI_TOKEN_VERSION = Token Version............................:\t AGENTAPI_TOKEN_3PARTY = Thirdparty Token.........................:\t AGENTAPI_TOKEN_ATTRS = Attributes from Token....................:\t AGENTAPI_LOGOUT = Logout...................................:\t AGENTAPI_UNINIT = UnInit...................................:\t AGENTAPI_NONE = (none) AGENTAPI_YES = (YES) AGENTAPI_NO = (NO) AGENTAPI_SUCCESS = (SUCCESS) AGENTAPI_FAILURE = (FAILURE) AGENTAPI_CHALLENGE = (CHALLENGE) AGENTAPI_TIMEOUT = (TIMEOUT) AGENTAPI_NOCONNECTION = (NOCONNECTION) # # Java DMS API literal strings # DMSAPI_ORG_ROOT = o=smdev.com DMSAPI_OU_ENG_DN = ou=eng DMSAPI_OU_DEV_DN = ou=dev DMSAPI_PEOPLE_DN = ou=People DMSAPI_ORGADMIN_GROUP = cn=orgadmin DMSAPI_DEVELOPER = developer DMSAPI_DEVELOPER_PWD = password DMSAPI_USER1 = developer1 DMSAPI_USER2 = developer2 DMSAPI_USER3 = developer3 DMSAPI_USER4 = developer4 DMSAPI_USER5 = developer5 # Search parameters DMSAPI_SCOPE = 2 DMSAPI_NEXTITEM = 0 DMSAPI_MAXITEMS = 20 DMSAPI_SETPREVITEM = 0 DMSAPI_SETMAXRESULTS = 500 DMSAPI_BLOCKSIZE = 10 DMSAPI_OFFSET = 5 DMSAPI_DELETECALLS = ++ Delete Calls ++ DMSAPI_ADDCALLS = ++ Add Calls ++ DMSAPI_GETCALLS = ++ Get Calls ++ DMSAPI_MODIFYCALLS = ++ Modify Calls ++ DMSAPI_SEARCHCALLS = ++ Search Calls ++ DMSAPI_ENDUSER = ++ End User Call ++ DMSAPI_ADMINUSER = ++ Admin Call ++ DMSAPI_FAKEADMINUSER = ++ Fake Admin Call ++ DMSAPI_DELETE_USER = Delete User..........................: DMSAPI_DELETE_GROUP = Delete Group.........................: DMSAPI_DELETE_ORG = Delete Organization..................: DMSAPI_ADD_ORG = Add Organization.....................: DMSAPI_ADD_GROUP = Add Group............................: DMSAPI_ADD_ORGUNIT = Add Organizational Unit..............: DMSAPI_ADD_USER = Add User.............................: DMSAPI_ADD_USER_GROUP = Add User to Group....................: DMSAPI_GET_ORGS = Get Organizations Under Directory....: DMSAPI_GET_ORG = Get Organization.....................: DMSAPI_GET_SUBORGS = Get Organizations Under Organization.: DMSAPI_GET_GROUPS = Get Groups Under Organization........: DMSAPI_GET_GROUP = Get Group............................: DMSAPI_GET_USER = Get User.............................: DMSAPI_GET_PWDSTATE = Get User Password State..............: DMSAPI_SET_PWDSTATE = Set User Password State..............: DMSAPI_CHECK_PWDSTATE = Check User Password State............: DMSAPI_GET_DIRCAPS = Get Directory Capabilities...........: DMSAPI_MODIFY_USER = Modify User..........................: DMSAPI_GET_ADMINDIRS = Get Admin User Directories...........: DMSAPI_GET_USERDIR = Get User Directory...................: DMSAPI_SEARCH = Search...............................: DMSAPI_SEARCH_PARAMS = Search Parameters....................: DMSAPI_SEARCH_FRWD = Search Forward (Sorting and Paging)..: DMSAPI_FOUND = Object Found.........................: DMSAPI_GET_GROUPS_USER = Get Groups a User is Member of.......: DMSAPI_GET_GROUPS_FRWD = Get Groups (Sorting and Paging)......: DMSAPI_MODIFY_STATE = Modify/Retrieve user password state DMSAPI_FAILED_USERDIR = Failed to find user directory DMSAPI_FAILED_DMS = Failed to get DMS context DMSAPI_PASSWORD_SRVCS = Supports Password Services DMSAPI_REGISTRATION = Supports Registration Policy DMSAPI_RESET_PWDS = Supports Reset User Passwords DMSAPI_CHANGE_USER = Supports Change User Capability DMSAPI_TRACK_USER = Supports Track Disabled Users DMSAPI_DMS = Supports DMS DMSAPI_RECURSIVE_SRCH = Supports Recursive Search DMSAPI_DISABLED_ATTR = Supports Disabled Attribute DMSAPI_UID_ATTR = Supports Universal ID Attribute DMSAPI_ANONYMOUS_ATTR = Supports Anonymous ID Attribute DMSAPI_PWD_DATA_ATTR = Supports Password Data Attribute DMSAPI_PWD_ATTR = Supports Password Attribute DMSAPI_EMAIL_ATTR = Supports e-mail Attribute DMSAPI_CHALLENGE_ATTR = Supports Challenge/Response Attribute DMSAPI_SORTING = Supports Sorting DMSAPI_PAGING = Supports Paging DMSAPI_DMS_REALM = DMS Realm............................: DMSAPI_SELFREG = Self Registration....................: DMSAPI_USERDIR = User Directory.......................: DMSAPI_ISPROTECTED = Agent API IsProtected................: DMSAPI_LOGIN = Agent API Login......................: DMSAPI_USERPROPS = Get User Properties..................: DMSAPI_CHANGEPWD = Change User Password.................: DMSAPI_DISABLE_USER = Disable User.........................: DMSAPI_PADDING = \t.............................:\t DMSAPI_REALM_NAME = \tRealm Context Name...........:\t DMSAPI_REALM_OID = \tRealm Context OID............:\t