glassfish 0.3.1-universal-java → 0.9.0-universal-java

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (88) hide show
  1. data/bin/asadmin +3 -11
  2. data/bin/glassfish +42 -0
  3. data/bin/glassfish_rails +39 -43
  4. data/domains/domain1/config/default-web.xml +16 -15
  5. data/domains/domain1/config/domain.xml +213 -198
  6. data/domains/domain1/config/domain.xml_ORIG +170 -210
  7. data/domains/domain1/config/keystore.jks +0 -0
  8. data/domains/domain1/config/logging.properties +48 -0
  9. data/domains/domain1/config/server.policy +10 -0
  10. data/domains/domain1/docroot/index.html +50 -17
  11. data/felix/bin/felix.jar +0 -0
  12. data/felix/bundle/org.apache.felix.shell.jar +0 -0
  13. data/felix/bundle/org.apache.felix.shell.remote.jar +0 -0
  14. data/felix/bundle/org.apache.felix.shell.tui.jar +0 -0
  15. data/felix/conf/config.properties +277 -0
  16. data/felix/conf/system.properties +14 -0
  17. data/lib/jndi-properties.jar +0 -0
  18. data/lib/templates/default-web.xml +1104 -1129
  19. data/lib/templates/domain.xml +166 -209
  20. data/lib/templates/keystore.jks +0 -0
  21. data/lib/templates/logging.properties +48 -0
  22. data/lib/templates/server.policy +170 -155
  23. data/modules/admin-cli.jar +0 -0
  24. data/modules/api-exporter.jar +0 -0
  25. data/modules/asadmin.rb +9 -0
  26. data/modules/asm-all-repackaged.jar +0 -0
  27. data/modules/{auto-depends-0.3.2.jar → auto-depends-0.3.33.jar} +0 -0
  28. data/modules/auto-depends.jar +0 -0
  29. data/modules/branding.jar +0 -0
  30. data/modules/{cli-framework-10.0-SNAPSHOT.jar → cli-framework.jar} +0 -0
  31. data/modules/command_line_parser.rb +54 -0
  32. data/modules/{common-util-10.0-SNAPSHOT.jar → common-util.jar} +0 -0
  33. data/modules/config-0.3.33.jar +0 -0
  34. data/modules/config-api.jar +0 -0
  35. data/modules/config.jar +0 -0
  36. data/modules/deployment-admin.jar +0 -0
  37. data/modules/deployment-autodeploy.jar +0 -0
  38. data/modules/deployment-common.jar +0 -0
  39. data/modules/flashlight-agent.jar +0 -0
  40. data/modules/flashlight-framework.jar +0 -0
  41. data/modules/gf-jruby-connector-0.7.1-SNAPSHOT.jar +0 -0
  42. data/modules/glassfish-api-3.0-Prelude-b28b.jar +0 -0
  43. data/modules/glassfish-api.jar +0 -0
  44. data/modules/glassfish.jar +0 -0
  45. data/modules/glassfish.rb +13 -9
  46. data/modules/grizzly-jruby-1.8.1.jar +0 -0
  47. data/modules/grizzly-jruby-module-0.7.1-SNAPSHOT.jar +0 -0
  48. data/modules/grizzly-module.jar +0 -0
  49. data/modules/hk2-0.3.33.jar +0 -0
  50. data/modules/hk2-core-0.3.33.jar +0 -0
  51. data/modules/hk2-core.jar +0 -0
  52. data/modules/hk2.jar +0 -0
  53. data/modules/internal-api.jar +0 -0
  54. data/modules/javax.xml.stream.jar +0 -0
  55. data/modules/kernel.jar +0 -0
  56. data/modules/{launcher-10.0-SNAPSHOT.jar → launcher.jar} +0 -0
  57. data/modules/monitoring-core.jar +0 -0
  58. data/modules/osgi-adapter.jar +0 -0
  59. data/modules/pkg-client.jar +0 -0
  60. data/modules/rdoc_usage.rb +27 -0
  61. data/modules/stats77.jar +0 -0
  62. data/modules/{stax-api-1.0-2.jar → stax-api.jar} +0 -0
  63. data/modules/{tiger-types-osgi-0.3.2.jar → tiger-types-osgi-0.3.33.jar} +0 -0
  64. data/modules/tiger-types-osgi.jar +0 -0
  65. data/modules/version.rb +5 -0
  66. data/modules/{wstx-asl-3.2.3.jar → wstx-asl.jar} +0 -0
  67. metadata +109 -77
  68. data/README +0 -12
  69. data/bin/asadmin.bat +0 -9
  70. data/bin/startserv +0 -11
  71. data/bin/startserv.bat +0 -9
  72. data/bin/stopserv +0 -13
  73. data/bin/stopserv.bat +0 -9
  74. data/modules/admin-cli-10.0-SNAPSHOT.jar +0 -0
  75. data/modules/config-0.3.2.jar +0 -0
  76. data/modules/config-api-10.0-SNAPSHOT.jar +0 -0
  77. data/modules/deployment-common-10.0-SNAPSHOT.jar +0 -0
  78. data/modules/gf-jruby-connector-0.7-SNAPSHOT.jar +0 -0
  79. data/modules/glassfish-10.0-SNAPSHOT.jar +0 -0
  80. data/modules/glassfish-api-10.0.0-rev5.jar +0 -0
  81. data/modules/grizzly-jruby-1.7.5-SNAPSHOT.jar +0 -0
  82. data/modules/grizzly-jruby-module-0.7-SNAPSHOT.jar +0 -0
  83. data/modules/grizzly-module-1.7.3.3-rev1.jar +0 -0
  84. data/modules/hk2-0.3.2.jar +0 -0
  85. data/modules/hk2-core-0.3.2.jar +0 -0
  86. data/modules/internal-api-10.0-SNAPSHOT.jar +0 -0
  87. data/modules/kernel-10.0-SNAPSHOT.jar +0 -0
  88. data/modules/osgi-adapter-0.3.2.jar +0 -0
@@ -1,213 +1,170 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- Copyright 1997-2007 Sun Microsystems, Inc. All rights reserved.
4
- Use is subject to license terms.
5
- -->
6
- <!-- Generated from default-domain.xml.template -->
7
- <!-- Avoid manual edits of this file. Run "asadmin verify-domain-xml" otherwise.-->
8
-
9
- <domain application-root="${com.sun.aas.instanceRoot}/applications" log-root="${com.sun.aas.instanceRoot}/logs">
10
- <system-applications/>
11
- <applications>
12
- <web-module name="adminapp" context-root="/web1" location="${com.sun.aas.installRoot}/lib/install/applications/adminapp/adminapp_war" object-type="system-admin" enabled="true" directory-deployed="true" availability-enabled="false">
13
- <!-- System Web Module - DO NOT DELETE! -->
14
- </web-module>
15
- <web-module name="WSTXServices" context-root="/__wstx-services" location="${com.sun.aas.installRoot}/lib/install/applications/wstx-services" object-type="system-all" enabled="true" directory-deployed="true" availability-enabled="false"/>
16
- <lifecycle-module class-name="com.sun.jbi.framework.sun.SunASJBIBootstrap" classpath="${com.sun.aas.installRoot}/jbi/lib/jbi_framework.jar" enabled="true" is-failure-fatal="false" name="JBIFramework" object-type="system-all">
17
- <description>"JBI Framework LifecycleModule"</description>
18
- <property name="com.sun.jbi.home" value="${com.sun.aas.installRoot}/jbi"/>
19
- </lifecycle-module>
20
- <lifecycle-module class-name="com.sun.xml.ws.transport.tcp.server.glassfish.WSTCPLifeCycleModule" classpath="${com.sun.aas.installRoot}/lib/webservices-rt.jar" enabled="true" is-failure-fatal="false" object-type="system-all" name="WSTCPConnectorLCModule"/>
21
- </applications>
22
- <resources>
23
- <jdbc-resource jndi-name="jdbc/__TimerPool" pool-name="__TimerPool" object-type="system-admin" enabled="true"/>
24
- <jdbc-resource jndi-name="jdbc/__CallFlowPool" pool-name="__CallFlowPool" object-type="system-all" enabled="true"/>
25
- <jdbc-resource jndi-name="jdbc/__default" pool-name="DerbyPool" object-type="user" enabled="true"/>
26
-
27
- <jdbc-connection-pool connection-validation-method="auto-commit" datasource-classname="org.apache.derby.jdbc.EmbeddedXADataSource" fail-all-connections="false" idle-timeout-in-seconds="300" is-connection-validation-required="false" is-isolation-level-guaranteed="true" max-pool-size="32" max-wait-time-in-millis="60000" res-type="javax.sql.XADataSource" name="__CallFlowPool" pool-resize-quantity="2" steady-pool-size="8" non-transactional-connections="false" allow-non-component-callers="false" validate-atmost-once-period-in-seconds="0" connection-leak-timeout-in-seconds="0" connection-leak-reclaim="false" connection-creation-retry-attempts="0" connection-creation-retry-interval-in-seconds="10" statement-timeout-in-seconds="-1" lazy-connection-enlistment="false" lazy-connection-association="false" associate-with-thread="false" match-connections="false" max-connection-usage-count="0" wrap-jdbc-objects="false">
28
- <property name="databaseName" value="${com.sun.aas.instanceRoot}/lib/databases/sun-callflow"/>
29
- <property name="connectionAttributes" value=";create=true"/>
1
+ <domain log-root="${com.sun.aas.instanceRoot}/logs" application-root="${com.sun.aas.instanceRoot}/applications" version="10.0">
2
+ <system-applications />
3
+ <applications />
4
+ <resources>
5
+ <jdbc-resource pool-name="__TimerPool" jndi-name="jdbc/__TimerPool" object-type="system-admin" />
6
+ <jdbc-resource pool-name="DerbyPool" jndi-name="jdbc/__default" />
7
+ <jdbc-connection-pool name="__TimerPool" datasource-classname="org.apache.derby.jdbc.EmbeddedXADataSource" res-type="javax.sql.XADataSource">
8
+ <property value="${com.sun.aas.instanceRoot}/lib/databases/ejbtimer" name="databaseName" />
9
+ <property value=";create=true" name="connectionAttributes" />
30
10
  </jdbc-connection-pool>
31
-
32
- <jdbc-connection-pool connection-validation-method="auto-commit" datasource-classname="org.apache.derby.jdbc.EmbeddedXADataSource" fail-all-connections="false" idle-timeout-in-seconds="300" is-connection-validation-required="false" is-isolation-level-guaranteed="true" max-pool-size="32" max-wait-time-in-millis="60000" res-type="javax.sql.XADataSource" name="__TimerPool" pool-resize-quantity="2" steady-pool-size="8" non-transactional-connections="false" allow-non-component-callers="false" validate-atmost-once-period-in-seconds="0" connection-leak-timeout-in-seconds="0" connection-leak-reclaim="false" connection-creation-retry-attempts="0" connection-creation-retry-interval-in-seconds="10" statement-timeout-in-seconds="-1" lazy-connection-enlistment="false" lazy-connection-association="false" associate-with-thread="false" match-connections="false" max-connection-usage-count="0" wrap-jdbc-objects="false">
33
- <property name="databaseName" value="${com.sun.aas.instanceRoot}/lib/databases/ejbtimer"/>
11
+ <jdbc-connection-pool is-isolation-level-guaranteed="false" name="DerbyPool" datasource-classname="org.apache.derby.jdbc.ClientDataSource" res-type="javax.sql.DataSource">
12
+ <property value="1527" name="PortNumber" />
13
+ <property value="APP" name="Password" />
14
+ <property value="APP" name="User" />
15
+ <property value="localhost" name="serverName" />
16
+ <property value="sun-appserv-samples" name="DatabaseName" />
17
+ <property value=";create=true" name="connectionAttributes" />
34
18
  </jdbc-connection-pool>
35
- <jdbc-connection-pool connection-validation-method="auto-commit" datasource-classname="org.apache.derby.jdbc.ClientDataSource" fail-all-connections="false" idle-timeout-in-seconds="300" is-connection-validation-required="false" is-isolation-level-guaranteed="false" max-pool-size="32" max-wait-time-in-millis="60000" name="DerbyPool" pool-resize-quantity="2" res-type="javax.sql.DataSource" steady-pool-size="8" non-transactional-connections="false" allow-non-component-callers="false" validate-atmost-once-period-in-seconds="0" connection-leak-timeout-in-seconds="0" connection-leak-reclaim="false" connection-creation-retry-attempts="0" connection-creation-retry-interval-in-seconds="10" statement-timeout-in-seconds="-1" lazy-connection-enlistment="false" lazy-connection-association="false" associate-with-thread="false" match-connections="false" max-connection-usage-count="0" wrap-jdbc-objects="false">
36
- <property name="PortNumber" value="1527"/>
37
- <property name="Password" value="APP"/>
38
- <property name="User" value="APP"/>
39
- <property name="serverName" value="localhost"/>
40
- <property name="DatabaseName" value="sun-appserv-samples"/>
41
- <property name="connectionAttributes" value=";create=true"/>
42
- </jdbc-connection-pool>
43
- </resources>
44
- <servers>
45
- <server name="%%%SERVER_ID%%%" config-ref="%%%CONFIG_MODEL_NAME%%%" lb-weight="100">
46
- <application-ref enabled="true" ref="adminapp" virtual-servers="__asadmin" lb-enabled="false" disable-timeout-in-minutes="30"/>
47
- <application-ref enabled="true" ref="admingui" virtual-servers="__asadmin" lb-enabled="false" disable-timeout-in-minutes="30"/>
48
- <application-ref enabled="true" ref="JBIFramework" lb-enabled="false" disable-timeout-in-minutes="30"/>
49
- <application-ref enabled="true" ref="WSTXServices" lb-enabled="false" disable-timeout-in-minutes="30"/>
50
- <application-ref enabled="true" ref="WSTCPConnectorLCModule" lb-enabled="false" disable-timeout-in-minutes="30"/>
51
- <resource-ref enabled="true" ref="jdbc/__TimerPool"/>
52
- <resource-ref enabled="true" ref="jdbc/__CallFlowPool"/>
53
- <resource-ref enabled="true" ref="jdbc/__default"/>
54
- </server>
55
- </servers>
19
+ </resources>
20
+ <servers>
21
+ <server name="%%%SERVER_ID%%%" config-ref="%%%CONFIG_MODEL_NAME%%%">
22
+ <resource-ref ref="jdbc/__TimerPool" />
23
+ <resource-ref ref="jdbc/__default" />
24
+ </server>
25
+ </servers>
56
26
  <configs>
57
- <config name="%%%CONFIG_MODEL_NAME%%%" dynamic-reconfiguration-enabled="true">
58
- <http-service>
59
- <access-log format="%client.name% %auth-user-name% %datetime% %request% %status% %response.length%" rotation-enabled="true" rotation-interval-in-minutes="15" rotation-policy="time" rotation-suffix="yyyy-MM-dd"/>
60
- <http-listener id="http-listener-1" address="0.0.0.0" port="%%%HTTP_PORT%%%" acceptor-threads="1" security-enabled="false" default-virtual-server="server" server-name="" xpowered-by="true" enabled="true" family="inet" blocking-enabled="false">
61
- <property name="proxiedProtocols" value="ws/tcp"/>
62
- </http-listener>
63
- <http-listener id="http-listener-2" address="0.0.0.0" port="%%%HTTP_SSL_PORT%%%" acceptor-threads="1" security-enabled="true" default-virtual-server="server" server-name="" xpowered-by="true" enabled="true" family="inet" blocking-enabled="false">
64
- <ssl cert-nickname="s1as" ssl3-enabled="false"/>
65
- </http-listener>
66
- <http-listener id="admin-listener" address="0.0.0.0" port="%%%ADMIN_PORT%%%" acceptor-threads="1" security-enabled="false" default-virtual-server="__asadmin" server-name="" xpowered-by="true" enabled="true" family="inet" blocking-enabled="false"/>
67
- <virtual-server id="server" http-listeners="http-listener-1,http-listener-2" hosts="${com.sun.aas.hostName}" state="on" log-file="${com.sun.aas.instanceRoot}/logs/server.log">
68
- <property name="docroot" value="${com.sun.aas.instanceRoot}/docroot"/>
69
- <property name="accesslog" value="${com.sun.aas.instanceRoot}/logs/access"/>
70
- <property name="sso-enabled" value="false"/>
71
- </virtual-server>
72
- <virtual-server id="__asadmin" http-listeners="admin-listener" hosts="${com.sun.aas.hostName}" state="on" log-file="${com.sun.aas.instanceRoot}/logs/server.log">
73
- <property name="docroot" value="${com.sun.aas.instanceRoot}/docroot"/>
74
- <property name="accesslog" value="${com.sun.aas.instanceRoot}/logs/access"/>
75
- <property name="sso-enabled" value="false"/>
76
- </virtual-server>
77
- <request-processing header-buffer-length-in-bytes="8192" initial-thread-count="2" request-timeout-in-seconds="30" thread-count="5" thread-increment="1"/>
78
- <keep-alive max-connections="250" thread-count="1" timeout-in-seconds="30"/>
79
- <connection-pool max-pending-count="4096" queue-size-in-bytes="4096" receive-buffer-size-in-bytes="4096" send-buffer-size-in-bytes="8192"/>
80
- <http-protocol dns-lookup-enabled="false" version="HTTP/1.1" forced-type="text/html; charset=iso-8859-1" default-type="text/html; charset=iso-8859-1" forced-response-type="AttributeDeprecated" default-response-type="AttributeDeprecated" ssl-enabled="true"/>
81
- <http-file-cache globally-enabled="false" file-caching-enabled="false" max-age-in-seconds="30" medium-file-size-limit-in-bytes="537600" medium-file-space-in-bytes="10485760" small-file-size-limit-in-bytes="2048" small-file-space-in-bytes="1048576" max-files-count="1024" file-transmission-enabled="false" hash-init-size="0"/>
82
- <property name="accessLoggingEnabled" value="false"/>
83
- </http-service>
84
- <iiop-service client-authentication-required="false">
85
- <orb use-thread-pool-ids="thread-pool-1" message-fragment-size="1024" max-connections="1024"/>
86
-
87
- <iiop-listener id="orb-listener-1" address="0.0.0.0" port="%%%ORB_LISTENER_PORT%%%" enabled="true" security-enabled="false"/>
88
- <iiop-listener id="SSL" address="0.0.0.0" port="%%%ORB_SSL_PORT%%%" security-enabled="true" enabled="true">
89
- <ssl cert-nickname="s1as" ssl2-enabled="false" ssl3-enabled="true" tls-enabled="true" tls-rollback-enabled="true" client-auth-enabled="false"/>
90
- </iiop-listener>
91
- <iiop-listener id="SSL_MUTUALAUTH" address="0.0.0.0" port="%%%ORB_MUTUALAUTH_PORT%%%" security-enabled="true" enabled="true">
92
- <ssl cert-nickname="s1as" client-auth-enabled="true" ssl2-enabled="false" ssl3-enabled="true" tls-enabled="true" tls-rollback-enabled="true"/>
93
- </iiop-listener>
94
- </iiop-service>
95
- <admin-service system-jmx-connector-name="system" type="das-and-server">
96
- <!-- The JSR 160 "system-jmx-connector" -->
97
- <jmx-connector accept-all="false" address="0.0.0.0" auth-realm-name="admin-realm" enabled="true" name="system" port="8686" protocol="rmi_jrmp" security-enabled="false"/>
98
- <!-- The JSR 160 "system-jmx-connector" -->
99
- <das-config dynamic-reload-enabled="true" dynamic-reload-poll-interval-in-seconds="2" autodeploy-enabled="true" autodeploy-polling-interval-in-seconds="2" autodeploy-dir="${com.sun.aas.instanceRoot}/autodeploy" autodeploy-verifier-enabled="false" autodeploy-jsp-precompilation-enabled="false" deploy-xml-validation="full" admin-session-timeout-in-minutes="60"/>
100
- <property name="adminConsoleContextRoot" value="/admin"/>
101
- <property name="adminConsoleDownloadLocation" value="http://download.java.net/glassfish/v3-tp2/admingui/gfv3-preview2-final-admingui.war"/>
102
- <!-- change this to reflect the correct final download location -->
103
- <property name="adminConsoleFolder" value="${com.sun.aas.installRoot}/lib/install/applications"/>
104
- </admin-service>
105
- <web-container>
106
- <session-config>
107
- <session-manager>
108
- <manager-properties/>
109
- <store-properties/>
110
- </session-manager>
111
- <session-properties/>
112
- </session-config>
113
- </web-container>
114
- <ejb-container steady-pool-size="0" pool-resize-quantity="8" max-pool-size="32" cache-resize-quantity="32" max-cache-size="512" pool-idle-timeout-in-seconds="600" cache-idle-timeout-in-seconds="600" removal-timeout-in-seconds="5400" victim-selection-policy="nru" commit-option="B" session-store="${com.sun.aas.instanceRoot}/session-store">
115
- <ejb-timer-service minimum-delivery-interval-in-millis="7000" max-redeliveries="1" redelivery-interval-internal-in-millis="5000"/>
116
- </ejb-container>
117
- <mdb-container steady-pool-size="0" pool-resize-quantity="8" max-pool-size="32" idle-timeout-in-seconds="600"/>
118
- <jms-service init-timeout-in-seconds="60" type="EMBEDDED" default-jms-host="default_JMS_host" reconnect-interval-in-seconds="5" reconnect-attempts="3" reconnect-enabled="true" addresslist-behavior="random" addresslist-iterations="3">
119
- <jms-host name="default_JMS_host" host="%%%HOST_NAME%%%" port="%%%JMS_PROVIDER_PORT%%%" admin-user-name="%%%JMS_PROVIDER_USERID%%%" admin-password="%%%JMS_PROVIDER_PASSWORD%%%"/>
120
- </jms-service>
121
- <log-service file="${com.sun.aas.instanceRoot}/logs/server.log" use-system-logging="false" log-to-console="false" alarms="false" log-rotation-limit-in-bytes="2000000" log-rotation-timelimit-in-minutes="0" retain-error-statistics-for-hours="5">
122
- <module-log-levels root="INFO" server="INFO" ejb-container="INFO" cmp-container="INFO" mdb-container="INFO" web-container="INFO" classloader="INFO" configuration="INFO" naming="INFO" security="INFO" admin="INFO" jts="INFO" jta="INFO" deployment="INFO" verifier="INFO" jaxr="INFO" jaxrpc="INFO" saaj="INFO" corba="INFO" javamail="INFO" jms="INFO" connector="INFO" jdo="INFO" cmp="INFO" util="INFO" resource-adapter="INFO" synchronization="INFO" node-agent="INFO" self-management="INFO" group-management-service="INFO" management-event="INFO"/>
123
- </log-service>
124
- <security-service default-realm="file" audit-enabled="false" jacc="default" audit-modules="default" anonymous-role="AttributeDeprecated" activate-default-principal-to-role-mapping="false">
125
- <!-- All administrative users use this realm by default. -->
126
- <auth-realm name="admin-realm" classname="com.sun.enterprise.security.auth.realm.file.FileRealm">
127
- <property name="file" value="${com.sun.aas.instanceRoot}/config/admin-keyfile"/>
128
- <property name="jaas-context" value="fileRealm"/>
129
- </auth-realm>
130
- <!-- All administrative users use this realm by default. -->
131
- <auth-realm name="file" classname="com.sun.enterprise.security.auth.realm.file.FileRealm">
132
- <property name="file" value="${com.sun.aas.instanceRoot}/config/keyfile"/>
133
- <property name="jaas-context" value="fileRealm"/>
134
- </auth-realm>
135
- <jacc-provider name="default" policy-provider="com.sun.enterprise.security.provider.PolicyWrapper" policy-configuration-factory-provider="com.sun.enterprise.security.provider.PolicyConfigurationFactoryImpl">
136
- <property name="repository" value="${com.sun.aas.instanceRoot}/generated/policy"/>
137
- </jacc-provider>
138
- <audit-module name="default" classname="com.sun.enterprise.security.Audit">
139
- <property name="auditOn" value="false"/>
140
- </audit-module>
141
- <message-security-config auth-layer="SOAP">
142
- <!-- turned off by default -->
143
- <provider-config class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule" provider-id="XWS_ClientProvider" provider-type="client">
144
- <request-policy auth-source="content"/>
145
- <response-policy auth-source="content"/>
146
- <property name="encryption.key.alias" value="s1as"/>
147
- <property name="signature.key.alias" value="s1as"/>
148
- <property name="dynamic.username.password" value="false"/>
149
- <property name="debug" value="false"/>
150
- </provider-config>
151
- <provider-config class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule" provider-id="ClientProvider" provider-type="client">
152
- <request-policy auth-source="content"/>
153
- <response-policy auth-source="content"/>
154
- <property name="encryption.key.alias" value="s1as"/>
155
- <property name="signature.key.alias" value="s1as"/>
156
- <property name="dynamic.username.password" value="false"/>
157
- <property name="debug" value="false"/>
158
- <property name="security.config" value="${com.sun.aas.instanceRoot}/config/wss-server-config-1.0.xml"/>
159
- </provider-config>
160
- <provider-config class-name="com.sun.xml.wss.provider.ServerSecurityAuthModule" provider-id="XWS_ServerProvider" provider-type="server">
161
- <request-policy auth-source="content"/>
162
- <response-policy auth-source="content"/>
163
- <property name="encryption.key.alias" value="s1as"/>
164
- <property name="signature.key.alias" value="s1as"/>
165
- <property name="debug" value="false"/>
166
- </provider-config>
167
- <provider-config class-name="com.sun.xml.wss.provider.ServerSecurityAuthModule" provider-id="ServerProvider" provider-type="server">
168
- <request-policy auth-source="content"/>
169
- <response-policy auth-source="content"/>
170
- <property name="encryption.key.alias" value="s1as"/>
171
- <property name="signature.key.alias" value="s1as"/>
172
- <property name="debug" value="false"/>
173
- <property name="security.config" value="${com.sun.aas.instanceRoot}/config/wss-server-config-1.0.xml"/>
174
- </provider-config>
175
- </message-security-config>
176
- </security-service>
177
- <transaction-service automatic-recovery="false" timeout-in-seconds="0" tx-log-dir="${com.sun.aas.instanceRoot}/logs" heuristic-decision="rollback" keypoint-interval="65536" retry-timeout-in-seconds="600"/>
178
- <monitoring-service>
179
- <module-monitoring-levels thread-pool="OFF" orb="OFF" ejb-container="OFF" web-container="OFF" transaction-service="OFF" http-service="OFF" jdbc-connection-pool="OFF" connector-connection-pool="OFF" connector-service="OFF" jms-service="OFF" jvm="OFF"/>
180
- </monitoring-service>
181
- <diagnostic-service compute-checksum="true" verify-config="true" capture-install-log="true" capture-system-info="true" capture-hadb-info="true" capture-app-dd="true" min-log-level="INFO" max-log-entries="500"/>
182
- <java-config java-home="${com.sun.aas.javaRoot}" debug-enabled="false" debug-options="-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=9009" rmic-options="-iiop -poa -alwaysgenerate -keepgenerated -g" javac-options="-g" system-classpath="" classpath-suffix="" env-classpath-ignored="true">
183
- <!-- various required jvm-options -->
184
- <jvm-options>-client</jvm-options>
185
- <jvm-options>-XX:+UnlockDiagnosticVMOptions</jvm-options>
186
- <jvm-options>-XX:+LogVMOutput</jvm-options>
187
- <jvm-options>-XX:LogFile=${com.sun.aas.instanceRoot}/logs/jvm.log</jvm-options>
188
- <jvm-options>-Djava.endorsed.dirs=${com.sun.aas.installRoot}/lib/endorsed</jvm-options>
189
- <jvm-options>-Djava.security.policy=${com.sun.aas.instanceRoot}/config/server.policy</jvm-options>
190
- <jvm-options>-Djava.security.auth.login.config=${com.sun.aas.instanceRoot}/config/login.conf</jvm-options>
191
- <jvm-options>-Dsun.rmi.dgc.server.gcInterval=3600000</jvm-options>
192
- <jvm-options>-Dsun.rmi.dgc.client.gcInterval=3600000</jvm-options>
193
- <jvm-options>-Xmx512m</jvm-options>
194
- <jvm-options>-Djavax.net.ssl.keyStore=${com.sun.aas.instanceRoot}/config/keystore.jks</jvm-options>
195
- <jvm-options>-Djavax.net.ssl.trustStore=${com.sun.aas.instanceRoot}/config/cacerts.jks</jvm-options>
196
- <jvm-options>-Djava.ext.dirs=${com.sun.aas.javaRoot}/lib/ext${path.separator}${com.sun.aas.javaRoot}/jre/lib/ext${path.separator}${com.sun.aas.instanceRoot}/lib/ext${path.separator}${com.sun.aas.derbyRoot}/lib</jvm-options>
197
- <jvm-options>-Djdbc.drivers=org.apache.derby.jdbc.ClientDriver</jvm-options>
198
- <jvm-options>-Dcom.sun.enterprise.config.config_environment_factory_class=com.sun.enterprise.config.serverbeans.AppserverConfigEnvironmentFactory</jvm-options>
199
- <jvm-options>-XX:NewRatio=2</jvm-options>
200
- <!--
201
- Use the following jvm-options element to disable the quick startup:
202
- com.sun.enterprise.server.ss.ASQuickStartup=false
203
- --></java-config>
204
- <thread-pools>
205
- <thread-pool thread-pool-id="thread-pool-1" min-thread-pool-size="0" max-thread-pool-size="200" idle-thread-timeout-in-seconds="120" num-work-queues="1"/>
206
-
207
- </thread-pools>
208
- <management-rules enabled="true">
209
- </management-rules>
210
- </config> <!-- config model with name "%%%CONFIG_MODEL_NAME%%%" ends -->
211
- </configs>
212
- <property name="administrative.domain.name" value="%%%DOMAIN_NAME%%%"/>
27
+ <config name="%%%CONFIG_MODEL_NAME%%%">
28
+ <http-service>
29
+ <access-log rotation-interval-in-minutes="15" rotation-suffix="yyyy-MM-dd" />
30
+ <http-listener default-virtual-server="server" server-name="" address="0.0.0.0" port="%%%HTTP_PORT%%%" id="http-listener-1">
31
+ </http-listener>
32
+ <http-listener default-virtual-server="server" enabled="false" security-enabled="true" server-name="" address="0.0.0.0" port="%%%HTTP_SSL_PORT%%%" id="http-listener-2">
33
+ <ssl ssl3-enabled="false" cert-nickname="s1as" />
34
+ </http-listener>
35
+ <http-listener default-virtual-server="__asadmin" server-name="" address="0.0.0.0" port="%%%ADMIN_PORT%%%" id="admin-listener">
36
+ </http-listener>
37
+ <virtual-server id="server" http-listeners="http-listener-1,http-listener-2">
38
+ <property value="${com.sun.aas.instanceRoot}/docroot" name="docroot" />
39
+ <property value="${com.sun.aas.instanceRoot}/logs/access" name="accesslog" />
40
+ <property value="false" name="sso-enabled" />
41
+ </virtual-server>
42
+ <virtual-server id="__asadmin" http-listeners="admin-listener">
43
+ <property value="${com.sun.aas.instanceRoot}/docroot" name="docroot" />
44
+ <property value="${com.sun.aas.instanceRoot}/logs/access" name="accesslog" />
45
+ <property value="false" name="sso-enabled" />
46
+ </virtual-server>
47
+ <request-processing initial-thread-count="2" header-buffer-length-in-bytes="8192" thread-count="20" thread-increment="1" />
48
+ <keep-alive max-connections="250" />
49
+ <connection-pool />
50
+ <http-protocol default-response-type="text/plain; charset=iso-8859-1" forced-response-type="text/plain; charset=iso-8859-1" />
51
+ <http-file-cache file-caching-enabled="false" globally-enabled="false" />
52
+ <property value="false" name="accessLoggingEnabled" />
53
+ </http-service>
54
+ <iiop-service>
55
+ <orb use-thread-pool-ids="thread-pool-1" />
56
+ <iiop-listener address="0.0.0.0" port="%%%ORB_LISTENER_PORT%%%" id="orb-listener-1" />
57
+ <iiop-listener security-enabled="true" address="0.0.0.0" port="%%%ORB_SSL_PORT%%%" id="SSL">
58
+ <ssl cert-nickname="s1as" />
59
+ </iiop-listener>
60
+ <iiop-listener security-enabled="true" address="0.0.0.0" port="%%%ORB_MUTUALAUTH_PORT%%%" id="SSL_MUTUALAUTH">
61
+ <ssl cert-nickname="s1as" client-auth-enabled="true" />
62
+ </iiop-listener>
63
+ </iiop-service>
64
+ <admin-service type="das-and-server" system-jmx-connector-name="system">
65
+ <jmx-connector auth-realm-name="admin-realm" security-enabled="false" address="0.0.0.0" port="%%%JMX_SYSTEM_CONNECTOR_PORT%%%" name="system" />
66
+ <das-config autodeploy-enabled="true" dynamic-reload-enabled="true" deploy-xml-validation="full" autodeploy-dir="${com.sun.aas.instanceRoot}/autodeploy" />
67
+ <property value="/admin" name="adminConsoleContextRoot" />
68
+ <property value="glassfish/lib/install/applications/admingui.war" name="adminConsoleDownloadLocation" />
69
+ <property value="${com.sun.aas.installRoot}/.." name="ipsRoot" />
70
+ </admin-service>
71
+ <web-container>
72
+ <session-config>
73
+ <session-manager>
74
+ <manager-properties />
75
+ <store-properties />
76
+ </session-manager>
77
+ <session-properties />
78
+ </session-config>
79
+ </web-container>
80
+ <ejb-container steady-pool-size="0" max-pool-size="32" session-store="${com.sun.aas.instanceRoot}/session-store" pool-resize-quantity="8">
81
+ <ejb-timer-service />
82
+ </ejb-container>
83
+ <mdb-container steady-pool-size="0" max-pool-size="32" pool-resize-quantity="8" >
84
+ </mdb-container>
85
+ <jms-service type="EMBEDDED" default-jms-host="default_JMS_host">
86
+ <jms-host name="default_JMS_host" host="%%%HOST_NAME%%%" port="%%%JMS_PROVIDER_PORT%%%" admin-user-name="%%%JMS_PROVIDER_USERID%%%" admin-password="%%%JMS_PROVIDER_PASSWORD%%%"/>
87
+ </jms-service>
88
+ <log-service file="${com.sun.aas.instanceRoot}/logs/server.log" log-rotation-limit-in-bytes="2000000">
89
+ <module-log-levels />
90
+ </log-service>
91
+ <security-service>
92
+ <auth-realm classname="com.sun.enterprise.security.auth.realm.file.FileRealm" name="admin-realm">
93
+ <property value="${com.sun.aas.instanceRoot}/config/admin-keyfile" name="file" />
94
+ <property value="fileRealm" name="jaas-context" />
95
+ </auth-realm>
96
+ <auth-realm classname="com.sun.enterprise.security.auth.realm.file.FileRealm" name="file">
97
+ <property value="${com.sun.aas.instanceRoot}/config/keyfile" name="file" />
98
+ <property value="fileRealm" name="jaas-context" />
99
+ </auth-realm>
100
+ <auth-realm classname="com.sun.enterprise.security.auth.realm.certificate.CertificateRealm" name="certificate" />
101
+ <jacc-provider policy-configuration-factory-provider="com.sun.enterprise.security.provider.PolicyConfigurationFactoryImpl" policy-provider="com.sun.enterprise.security.provider.PolicyWrapper" name="default">
102
+ <property value="${com.sun.aas.instanceRoot}/generated/policy" name="repository" />
103
+ </jacc-provider>
104
+ <jacc-provider policy-configuration-factory-provider="com.sun.enterprise.security.jacc.provider.SimplePolicyConfigurationFactory" policy-provider="com.sun.enterprise.security.jacc.provider.SimplePolicyProvider" name="simple" />
105
+ <audit-module classname="com.sun.enterprise.security.Audit" name="default">
106
+ <property value="false" name="auditOn" />
107
+ </audit-module>
108
+ <message-security-config auth-layer="SOAP">
109
+ <provider-config provider-id="XWS_ClientProvider" class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule" provider-type="client">
110
+ <request-policy auth-source="content" />
111
+ <response-policy auth-source="content" />
112
+ <property value="s1as" name="encryption.key.alias" />
113
+ <property value="s1as" name="signature.key.alias" />
114
+ <property value="false" name="dynamic.username.password" />
115
+ <property value="false" name="debug" />
116
+ </provider-config>
117
+ <provider-config provider-id="ClientProvider" class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule" provider-type="client">
118
+ <request-policy auth-source="content" />
119
+ <response-policy auth-source="content" />
120
+ <property value="s1as" name="encryption.key.alias" />
121
+ <property value="s1as" name="signature.key.alias" />
122
+ <property value="false" name="dynamic.username.password" />
123
+ <property value="false" name="debug" />
124
+ <property value="${com.sun.aas.instanceRoot}/config/wss-server-config-1.0.xml" name="security.config" />
125
+ </provider-config>
126
+ <provider-config provider-id="XWS_ServerProvider" class-name="com.sun.xml.wss.provider.ServerSecurityAuthModule" provider-type="server">
127
+ <request-policy auth-source="content" />
128
+ <response-policy auth-source="content" />
129
+ <property value="s1as" name="encryption.key.alias" />
130
+ <property value="s1as" name="signature.key.alias" />
131
+ <property value="false" name="debug" />
132
+ </provider-config>
133
+ <provider-config provider-id="ServerProvider" class-name="com.sun.xml.wss.provider.ServerSecurityAuthModule" provider-type="server">
134
+ <request-policy auth-source="content" />
135
+ <response-policy auth-source="content" />
136
+ <property value="s1as" name="encryption.key.alias" />
137
+ <property value="s1as" name="signature.key.alias" />
138
+ <property value="false" name="debug" />
139
+ <property value="${com.sun.aas.instanceRoot}/config/wss-server-config-1.0.xml" name="security.config" />
140
+ </provider-config>
141
+ </message-security-config>
142
+ </security-service>
143
+ <transaction-service tx-log-dir="${com.sun.aas.instanceRoot}/logs" >
144
+ </transaction-service>
145
+ <monitoring-service>
146
+ <module-monitoring-levels />
147
+ </monitoring-service>
148
+ <java-config classpath-suffix="" system-classpath="" debug-options="-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=9009">
149
+ <jvm-options>-client</jvm-options>
150
+ <jvm-options>-XX:+UnlockDiagnosticVMOptions</jvm-options>
151
+ <jvm-options>-XX:+LogVMOutput</jvm-options>
152
+ <jvm-options>-XX:LogFile=${com.sun.aas.instanceRoot}/logs/jvm.log</jvm-options>
153
+ <jvm-options>-Djava.endorsed.dirs=${com.sun.aas.installRoot}/lib/endorsed</jvm-options>
154
+ <jvm-options>-Djava.security.policy=${com.sun.aas.instanceRoot}/config/server.policy</jvm-options>
155
+ <jvm-options>-Djava.security.auth.login.config=${com.sun.aas.instanceRoot}/config/login.conf</jvm-options>
156
+ <jvm-options>-Xmx512m</jvm-options>
157
+ <jvm-options>-Djavax.net.ssl.keyStore=${com.sun.aas.instanceRoot}/config/keystore.jks</jvm-options>
158
+ <jvm-options>-Djavax.net.ssl.trustStore=${com.sun.aas.instanceRoot}/config/cacerts.jks</jvm-options>
159
+ <jvm-options>-Djava.ext.dirs=${com.sun.aas.javaRoot}/lib/ext${path.separator}${com.sun.aas.javaRoot}/jre/lib/ext${path.separator}${com.sun.aas.instanceRoot}/lib/ext${path.separator}${com.sun.aas.derbyRoot}/lib</jvm-options>
160
+ <jvm-options>-Djdbc.drivers=org.apache.derby.jdbc.ClientDriver</jvm-options>
161
+ <jvm-options>-Dcom.sun.enterprise.config.config_environment_factory_class=com.sun.enterprise.config.serverbeans.AppserverConfigEnvironmentFactory</jvm-options>
162
+ <jvm-options>-XX:NewRatio=2</jvm-options>
163
+ </java-config>
164
+ <thread-pools>
165
+ <thread-pool thread-pool-id="thread-pool-1" />
166
+ </thread-pools>
167
+ </config>
168
+ </configs>
169
+ <property name="administrative.domain.name" value="%%%DOMAIN_NAME%%%"/>
213
170
  </domain>
Binary file
@@ -80,3 +80,51 @@ java.util.logging.ConsoleHandler.formatter = com.sun.enterprise.server.logging.U
80
80
  # For example, set the com.xyz.foo logger to only log SEVERE
81
81
  # messages:
82
82
  com.xyz.foo.level = SEVERE
83
+
84
+ #Some logger names for v3 are below just uncoment the line logger below and save the file. The logging code will automatically be reconfigured.
85
+ #ROOTLOGGER
86
+ #javax.enterprise.level=FINE
87
+ #Tools Logger
88
+ #javax.enterprise.system.tools.level=FINE
89
+ # EJB Logger
90
+ #javax.enterprise.system.container.ejb.level=FINE
91
+ #JAVAMAIL_LOGGER
92
+ #javax.enterprise.resource.javamail.level=FINE
93
+ #JMS_LOGGER
94
+ #javax.enterprise.resource.jms.level=FINE
95
+ #WEB LOGGER
96
+ #javax.enterprise.system.container.web.level=FINE
97
+ #CMP_LOGGER
98
+ #javax.enterprise.system.container.cmp.level=FINE
99
+ #JDO_LOGGER
100
+ #javax.enterprise.resource.jdo.level=FINE
101
+ #ACC_LOGGER
102
+ #javax.enterprise.system.container.appclient.level=FINE
103
+ #MDB_LOGGER
104
+ #javax.enterprise.system.container.ejb.mdb.level=FINE
105
+ #SECURITY LOGGER
106
+ #javax.enterprise.system.core.security.level=FINE
107
+ #TRANSACTION_LOGGER
108
+ #javax.enterprise.system.core.transaction.level=FINE
109
+ #CORBA_LOGGER
110
+ #javax.enterprise.resource.corba.level=FINE
111
+ #ADMIN LOGGER
112
+ #javax.enterprise.system.tools.admin.level=FINE
113
+ #DPL_LOGGER - deployment logger
114
+ #javax.enterprise.system.tools.deployment.level=FINE
115
+ #SAAJ_LOGGER
116
+ #javax.enterprise.system.webservices.saaj.level=FINE
117
+ #UTIL_LOGGER
118
+ javax.enterprise.system.util.level=FINE
119
+ #NAMING_LOGGER
120
+ #javax.enterprise.system.core.naming.level=FINE
121
+ #CORE_LOGGER
122
+ #javax.enterprise.system.core.level=FINE
123
+ #LOADER_LOGGER
124
+ #javax.enterprise.system.core.classloading.level=FINE
125
+ #CONFIG_LOGGER
126
+ #javax.enterprise.system.core.config.level=FINE
127
+ #AMX_LOGGER
128
+ #javax.enterprise.system.AMX.level=FINE
129
+
130
+
@@ -1,155 +1,170 @@
1
- //
2
- // The contents of this file are subject to the terms
3
- // of the Common Development and Distribution License
4
- // (the "License"). You may not use this file except
5
- // in compliance with the License.
6
- //
7
- // You can obtain a copy of the license at
8
- // glassfish/bootstrap/legal/CDDLv1.0.txt or
9
- // https://glassfish.dev.java.net/public/CDDLv1.0.html.
10
- // See the License for the specific language governing
11
- // permissions and limitations under the License.
12
- //
13
- // When distributing Covered Code, include this CDDL
14
- // HEADER in each file and include the License file at
15
- // glassfish/bootstrap/legal/CDDLv1.0.txt. If applicable,
16
- // add the following below this CDDL HEADER, with the
17
- // fields enclosed by brackets "[]" replaced with your
18
- // own identifying information: Portions Copyright [yyyy]
19
- // [name of copyright owner]
20
- //
21
-
22
- /* Copyright 2004 Sun Microsystems, Inc. All rights reserved. */
23
- /* SUN PROPRIETARY/CONFIDENTIAL. Use is subject to license terms. */
24
-
25
- // Core server classes get all permissions by default
26
- grant codeBase "file:${com.sun.aas.installRoot}/lib/-" {
27
- permission java.security.AllPermission;
28
- };
29
-
30
- // jdmk classes get all permissions by default
31
- grant codeBase "file:${com.sun.aas.jdmkHome}/lib/-" {
32
- permission java.security.AllPermission;
33
- };
34
-
35
- // mfwk_instrum_tk.jar get all permissions by default
36
- grant codeBase "file:${com.sun.aas.mfwkHome}/lib/mfwk_instrum_tk.jar" {
37
- permission java.security.AllPermission;
38
- };
39
-
40
- // lockhart classes get all permissions by default
41
- grant codeBase "file:${com.sun.aas.webconsoleLib}/cc.jar" {
42
- permission java.security.AllPermission;
43
- };
44
-
45
- // jato classes get all permissions by default
46
- grant codeBase "file:${com.sun.aas.jatoRoot}/jato.jar" {
47
- permission java.security.AllPermission;
48
- };
49
-
50
- // JBI get all permissions by default
51
- grant codeBase "file:${com.sun.aas.installRoot}/jbi/-" {
52
- permission java.security.AllPermission;
53
- };
54
-
55
- // JBI instances get all permissions by default
56
- grant codeBase "file:${com.sun.aas.instanceRoot}/jbi/-" {
57
- permission java.security.AllPermission;
58
- };
59
-
60
- // iMQ classes get all permissions by default
61
- grant codeBase "file:${com.sun.aas.imqLib}/-" {
62
- permission java.security.AllPermission;
63
- };
64
-
65
- // ANT classes get all permissions by default
66
- grant codeBase "file:${com.sun.aas.antLib}/-" {
67
- permission java.security.AllPermission;
68
- };
69
-
70
- // Derby driver classes get all permissions by default
71
- grant codeBase "file:${com.sun.aas.derbyRoot}/lib/-" {
72
- permission java.security.AllPermission;
73
- };
74
-
75
- // Pointbase embedded server classes get all permissions by default
76
- grant codeBase "file:${com.sun.aas.pointbaseRoot}/lib/-" {
77
- permission java.security.AllPermission;
78
- };
79
-
80
- // Web Services classes get all permissions by default
81
- grant codeBase "file:${com.sun.aas.webServicesLib}/-" {
82
- permission java.security.AllPermission;
83
- };
84
-
85
- // permissions for avkit classes
86
- grant codeBase "file:${j2ee.appverification.home}/lib/-" {
87
- permission java.security.AllPermission;
88
- };
89
-
90
- // permissions for HADB jar file(s)
91
- grant codeBase "file:${com.sun.aas.hadbRoot}/lib/-" {
92
- permission java.security.AllPermission;
93
- };
94
-
95
- // permission for JDK's tools.jar to enable webservice annotation processing
96
- // at runtime by wsgen tool:
97
- // permission java.lang.RuntimePermission "createClassLoader";
98
- //
99
- // permission for JDK's tools.jar to sign JARs at runtime for
100
- // Java Web Start support:
101
- // permissions java.security.AllPermission;
102
- // on the advice of the JDK tools folks. Should be refined later.
103
- grant codeBase "file:${com.sun.aas.javaRoot}/lib/tools.jar" {
104
- permission java.security.AllPermission;
105
- };
106
-
107
- //Required to register MBeans, fails otherwise
108
- grant {
109
- permission javax.management.MBeanTrustPermission "register" ;
110
- };
111
- //Required to register MBeans, fails otherwise
112
-
113
-
114
- // Basic set of required permissions granted to all remaining code
115
- grant {
116
- //Workaround for bugs #6484935, 6513799
117
- permission java.lang.RuntimePermission "getProtectionDomain";
118
- permission com.sun.corba.ee.impl.presentation.rmi.DynamicAccessPermission "access";
119
- permission java.util.PropertyPermission "*", "read,write";
120
-
121
- permission java.lang.RuntimePermission "loadLibrary.*";
122
- permission java.lang.RuntimePermission "queuePrintJob";
123
- permission java.net.SocketPermission "*", "connect";
124
- permission java.io.FilePermission "<<ALL FILES>>", "read,write";
125
-
126
- // work-around for pointbase bug 4864405
127
- permission java.io.FilePermission "${com.sun.aas.instanceRoot}${/}lib${/}databases${/}-", "delete";
128
- permission java.io.FilePermission "${java.io.tmpdir}${/}-", "delete";
129
-
130
- permission java.util.PropertyPermission "*", "read";
131
-
132
- permission java.lang.RuntimePermission "modifyThreadGroup";
133
- permission java.lang.RuntimePermission "getClassLoader";
134
- permission java.lang.RuntimePermission "setContextClassLoader";
135
- permission javax.management.MBeanPermission "[com.sun.messaging.jms.*:*]", "*";
136
- };
137
-
138
-
139
- // Following grant block is only required by Connectors. If Connectors
140
- // are not in use the recommendation is to remove this grant.
141
- grant {
142
- permission javax.security.auth.PrivateCredentialPermission "javax.resource.spi.security.PasswordCredential * \"*\"","read";
143
- };
144
-
145
- // Following grant block is only required for Reflection. If Reflection
146
- // is not in use the recommendation is to remove this section.
147
- grant {
148
- permission java.lang.RuntimePermission "accessDeclaredMembers";
149
- };
150
-
151
- // Permissions to invoke CORBA objects in server
152
- grant {
153
- permission com.sun.enterprise.security.CORBAObjectPermission "*", "*";
154
- };
155
-
1
+ //
2
+ // The contents of this file are subject to the terms
3
+ // of the Common Development and Distribution License
4
+ // (the "License"). You may not use this file except
5
+ // in compliance with the License.
6
+ //
7
+ // You can obtain a copy of the license at
8
+ // glassfish/bootstrap/legal/CDDLv1.0.txt or
9
+ // https://glassfish.dev.java.net/public/CDDLv1.0.html.
10
+ // See the License for the specific language governing
11
+ // permissions and limitations under the License.
12
+ //
13
+ // When distributing Covered Code, include this CDDL
14
+ // HEADER in each file and include the License file at
15
+ // glassfish/bootstrap/legal/CDDLv1.0.txt. If applicable,
16
+ // add the following below this CDDL HEADER, with the
17
+ // fields enclosed by brackets "[]" replaced with your
18
+ // own identifying information: Portions Copyright [yyyy]
19
+ // [name of copyright owner]
20
+ //
21
+
22
+ /* Copyright 2004 Sun Microsystems, Inc. All rights reserved. */
23
+ /* SUN PROPRIETARY/CONFIDENTIAL. Use is subject to license terms. */
24
+
25
+ // Core server classes get all permissions by default
26
+ grant codeBase "file:${com.sun.aas.installRoot}/lib/-" {
27
+ permission java.security.AllPermission;
28
+ };
29
+
30
+ // Core server classes get all permissions by default
31
+ grant codeBase "file:${com.sun.aas.installRoot}/modules/-" {
32
+ permission java.security.AllPermission;
33
+ };
34
+
35
+ // Felix classes get all permissions by default
36
+ grant codeBase "file:${com.sun.aas.installRoot}/felix/bin/-" {
37
+ permission java.security.AllPermission;
38
+ };
39
+
40
+ // jdmk classes get all permissions by default
41
+ grant codeBase "file:${com.sun.aas.jdmkHome}/lib/-" {
42
+ permission java.security.AllPermission;
43
+ };
44
+
45
+ // mfwk_instrum_tk.jar get all permissions by default
46
+ grant codeBase "file:${com.sun.aas.mfwkHome}/lib/mfwk_instrum_tk.jar" {
47
+ permission java.security.AllPermission;
48
+ };
49
+
50
+ // lockhart classes get all permissions by default
51
+ grant codeBase "file:${com.sun.aas.webconsoleLib}/cc.jar" {
52
+ permission java.security.AllPermission;
53
+ };
54
+
55
+ // jato classes get all permissions by default
56
+ grant codeBase "file:${com.sun.aas.jatoRoot}/jato.jar" {
57
+ permission java.security.AllPermission;
58
+ };
59
+
60
+ // JBI get all permissions by default
61
+ grant codeBase "file:${com.sun.aas.installRoot}/jbi/-" {
62
+ permission java.security.AllPermission;
63
+ };
64
+
65
+ // JBI instances get all permissions by default
66
+ grant codeBase "file:${com.sun.aas.instanceRoot}/jbi/-" {
67
+ permission java.security.AllPermission;
68
+ };
69
+
70
+ // Composite applications get all permissions by default
71
+ grant codeBase "file:${com.sun.aas.instanceRoot}/applications/composite-applications/-" {
72
+ permission java.security.AllPermission;
73
+ };
74
+
75
+ // iMQ classes get all permissions by default
76
+ grant codeBase "file:${com.sun.aas.imqLib}/-" {
77
+ permission java.security.AllPermission;
78
+ };
79
+
80
+ // ANT classes get all permissions by default
81
+ grant codeBase "file:${com.sun.aas.antLib}/-" {
82
+ permission java.security.AllPermission;
83
+ };
84
+
85
+ // Derby driver classes get all permissions by default
86
+ grant codeBase "file:${com.sun.aas.derbyRoot}/lib/-" {
87
+ permission java.security.AllPermission;
88
+ };
89
+
90
+ // Pointbase embedded server classes get all permissions by default
91
+ grant codeBase "file:${com.sun.aas.pointbaseRoot}/lib/-" {
92
+ permission java.security.AllPermission;
93
+ };
94
+
95
+ // Web Services classes get all permissions by default
96
+ grant codeBase "file:${com.sun.aas.webServicesLib}/-" {
97
+ permission java.security.AllPermission;
98
+ };
99
+
100
+ // permissions for avkit classes
101
+ grant codeBase "file:${j2ee.appverification.home}/lib/-" {
102
+ permission java.security.AllPermission;
103
+ };
104
+
105
+ // permissions for HADB jar file(s)
106
+ grant codeBase "file:${com.sun.aas.hadbRoot}/lib/-" {
107
+ permission java.security.AllPermission;
108
+ };
109
+
110
+ // permission for JDK's tools.jar to enable webservice annotation processing
111
+ // at runtime by wsgen tool:
112
+ // permission java.lang.RuntimePermission "createClassLoader";
113
+ //
114
+ // permission for JDK's tools.jar to sign JARs at runtime for
115
+ // Java Web Start support:
116
+ // permissions java.security.AllPermission;
117
+ // on the advice of the JDK tools folks. Should be refined later.
118
+ grant codeBase "file:${com.sun.aas.javaRoot}/lib/tools.jar" {
119
+ permission java.security.AllPermission;
120
+ };
121
+
122
+ //Loading MBeans from anywhere, to take care of side effects of 6235678.
123
+ grant {
124
+ permission javax.management.MBeanTrustPermission "register" ;
125
+ };
126
+ //Loading MBeans from anywhere, to take care of side effects of 6235678.
127
+
128
+
129
+ // Basic set of required permissions granted to all remaining code
130
+ grant {
131
+ //Workaround for bugs #6484935, 6513799
132
+ permission java.lang.RuntimePermission "getProtectionDomain";
133
+ permission com.sun.corba.ee.impl.presentation.rmi.DynamicAccessPermission "access";
134
+ permission java.util.PropertyPermission "*", "read,write";
135
+
136
+ permission java.lang.RuntimePermission "loadLibrary.*";
137
+ permission java.lang.RuntimePermission "queuePrintJob";
138
+ permission java.net.SocketPermission "*", "connect";
139
+ permission java.io.FilePermission "<<ALL FILES>>", "read,write";
140
+
141
+ // work-around for pointbase bug 4864405
142
+ permission java.io.FilePermission "${com.sun.aas.instanceRoot}${/}lib${/}databases${/}-", "delete";
143
+ permission java.io.FilePermission "${java.io.tmpdir}${/}-", "delete";
144
+
145
+ permission java.util.PropertyPermission "*", "read";
146
+
147
+ permission java.lang.RuntimePermission "modifyThreadGroup";
148
+ permission java.lang.RuntimePermission "getClassLoader";
149
+ permission java.lang.RuntimePermission "setContextClassLoader";
150
+ permission javax.management.MBeanPermission "[com.sun.messaging.jms.*:*]", "*";
151
+ };
152
+
153
+
154
+ // Following grant block is only required by Connectors. If Connectors
155
+ // are not in use the recommendation is to remove this grant.
156
+ grant {
157
+ permission javax.security.auth.PrivateCredentialPermission "javax.resource.spi.security.PasswordCredential * \"*\"","read";
158
+ };
159
+
160
+ // Following grant block is only required for Reflection. If Reflection
161
+ // is not in use the recommendation is to remove this section.
162
+ grant {
163
+ permission java.lang.RuntimePermission "accessDeclaredMembers";
164
+ };
165
+
166
+ // Permissions to invoke CORBA objects in server
167
+ grant {
168
+ permission com.sun.enterprise.security.CORBAObjectPermission "*", "*";
169
+ };
170
+