torquebox-server 2.0.0.beta1-java

data/jboss/docs/schema/jboss-as-security_1_1.xsd

@@ -0,0 +1,414 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2011, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:security:1.1"
+           xmlns="urn:jboss:domain:security:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.1">
+
+   <!-- The security subsystem root element -->
+   <xs:element name="subsystem" type="security-containerType" />
+
+   <!-- The security container configuration -->
+   <xs:complexType name="security-containerType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The security subsystem, used to configure authentication and authorization.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:all>
+         <xs:element name="security-management" type="securityManagementType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+      </xs:all>
+   </xs:complexType>
+
+   <!-- The security management element -->
+   <xs:complexType name="securityManagementType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The optional "deep-copy-subject-mode" attribute sets the copy mode of subjects done by the security
+                    managers to be deep copies that makes copies of the subject principals and credentials if they are
+                    cloneable. It should be set to true if subject include mutable content that can be corrupted when
+                    multiple threads have the same identity and cache flushes/logout clearing the subject in one thread
+                    results in subject references affecting other threads. Default value is "false".
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="deep-copy-subject-mode" type="xs:boolean" use="optional"/>
+   </xs:complexType>
+
+   <!-- Configuration for security domains -->
+   <xs:complexType name="securityDomainsType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Configures security domains for applications.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="security-domain" type="securityDomainType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="securityDomainType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Definition of a security domain.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:choice>
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="authentication-jaspi" type="authenticationJaspiType" minOccurs="0" maxOccurs="1"/>
+         </xs:choice>
+         <xs:element name="authorization" type="authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="acl" type="aclType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="mapping" type="mappingType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="audit" type="auditType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="identity-trust" type="identityTrustType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="jsse" type="jsseType" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="cache-type" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationJaspiType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JASPI authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module-stack" type="loginModuleStackType" maxOccurs="unbounded"/>
+         <xs:element name="auth-module" type="authModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authorizationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="policy-module" type="policyModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="aclType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="acl-module" type="aclModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="mappingType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="mapping-module" type="mappingModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="auditType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="provider-module" type="providerModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="identityTrustType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="trust-module" type="trustModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:simpleType name="module-option-flag">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    The flag attribute controls how a login module
+                    participates in the overall procedure.
+                    Required - The LoginModule is required to succeed. If it
+                    succeeds or fails, authentication still continues to proceed
+                    down the LoginModule list.
+
+                    Requisite - The LoginModule is required to succeed. If it succeeds,
+                    authentication continues down the LoginModule list. If it fails,
+                    control immediately returns to the application (authentication does not proceed
+                    down the LoginModule list).
+
+                    Sufficient - The LoginModule is  not required to succeed. If it does
+                    succeed, control immediately returns to the application (authentication
+                    does not proceed down the LoginModule list). If it fails,
+                    authentication continues down the LoginModule list.
+
+                    Optional - The LoginModule is not required to succeed. If it succeeds or
+                    fails, authentication still continues to proceed down the
+                    LoginModule list.
+
+                    The overall authentication succeeds only if
+                    all required and requisite LoginModules succeed. If a
+                    sufficient LoginModule is configured and succeeds, then only
+                    the required and requisite LoginModules prior to that
+                    sufficient LoginModule need to have succeeded for the overall
+                    authentication to succeed. If no required or requisite
+                    LoginModules are configured for an application, then at least
+                    one sufficient or optional LoginModule must succeed.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:restriction base="xs:token">
+         <xs:enumeration value="required"/>
+         <xs:enumeration value="requisite"/>
+         <xs:enumeration value="sufficient"/>
+         <xs:enumeration value="optional"/>
+      </xs:restriction>
+   </xs:simpleType>
+
+   <xs:complexType name="loginModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="propertyType">
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="value" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="loginModuleStackType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="authModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="login-module-stack-ref" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="policyModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="aclModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="mappingModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="type" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="providerModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="trustModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="jsseType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JSSE configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+        <xs:element name="additional-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+      <xs:attribute name="keystore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="client-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="server-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="service-auth-token" type="xs:string" use="optional"/>
+      <xs:attribute name="client-auth" type="xs:boolean" use="optional"/>
+      <xs:attribute name="cipher-suites" type="xs:string" use="optional"/>
+      <xs:attribute name="protocols" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="properties">
+      <xs:sequence>
+         <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="vaultType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Vault Configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="optional"/>
+   </xs:complexType>
+</xs:schema>

data/jboss/docs/schema/jboss-as-threads_1_0.xsd

@@ -0,0 +1,292 @@
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2011, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:threads:1.0"
+            xmlns="urn:jboss:domain:threads:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The threads subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    The threading subsystem, used to declare manageable thread pools and resources.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="thread-factory" type="thread-factory"/>
+            <xs:element name="unbounded-queue-thread-pool" type="unbounded-queue-thread-pool"/>
+            <xs:element name="bounded-queue-thread-pool" type="bounded-queue-thread-pool"/>
+            <xs:element name="queueless-thread-pool" type="queueless-thread-pool"/>
+            <xs:element name="scheduled-thread-pool" type="scheduled-thread-pool"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="thread-factory">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread factory (implementing java.util.concurrent.ThreadFactory).  The "name" attribute is
+                the bean name of the created thread factory.  The optional "priority" attribute may be used to specify
+                the thread priority of created threads.  The optional "group-name" attribute specifies the name of a the
+                thread group to create for this thread factory.
+
+                The "thread-name-pattern" is the template used to create names for threads.  The following patterns
+                may be used:
+
+                 %% - emit a percent sign
+                 %t - emit the per-factory thread sequence number
+                 %g - emit the global thread sequence number
+                 %f - emit the factory sequence number
+                 %i - emit the thread ID
+                 %G - emit the thread group name
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group-name" type="xs:string" use="optional"/>
+        <xs:attribute name="thread-name-pattern" type="xs:string" use="optional"/>
+        <xs:attribute name="priority" type="priority" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="unbounded-queue-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the bean name of the created executor.
+
+                The nested "max-threads" element must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="scaled-count"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-queue-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with a bounded queue.  Such a thread pool has a core and maximum size and a
+                specified queue length.  When a task is submitted, if the number of running threads is less than the
+                core size, a new thread is created.  Otherwise, if there is room in the queue, the task is enqueued.
+                Otherwise, if the number of running threads is less than the maximum size, a new thread is created.
+                Otherwise, if blocking is enabled, the caller blocks until room becomes available in the queue.
+                Otherwise, the task is handed off to the designated handoff executor, if one is specified.  Otherwise,
+                the task is rejected.
+
+                The "name" attribute is the bean name of the created executor.  The "allow-core-timeout" attribute
+                specifies whether core threads may time out; if false, only threads above the core size will time out.
+                The "blocking" attribute specifies whether the submitter thread will block if no space is available in
+                this executor.
+
+                The optional "core-threads" element may be used to specify the core thread pool size which is smaller
+                than the maximum pool size.  The required "max-threads" element specifies the maximum thread pool size.
+                The required "queue-length" element specifies the queue length.  The nested "keepalive-time" element may
+                used to specify the amount of time that threads beyond the core pool size should be kept running when idle.
+                The optional "thread-factory" element specifies the bean name of a specific thread factory to use to
+                create worker threads.  The optional "handoff-executor" element specifies an executor to delegate tasks
+                to in the event that a task cannot be accepted.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-threads" type="scaled-count" minOccurs="0"/>
+            <xs:element name="queue-length" type="scaled-count"/>
+            <xs:element name="max-threads" type="scaled-count"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+            <xs:element name="handoff-executor" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean"/>
+        <xs:attribute name="blocking" use="optional" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueless-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with no queue.  When a task is submitted, if the number of running threads is
+                less than the maximum size, a new thread is created.  Otherwise, if blocking is enabled, the caller
+                blocks until another thread completes its task and accepts the new one.  Otherwise, the task is handed
+                off to the designated handoff executor, if one is specified.  Otherwise, the task is rejected.
+
+                The "name" attribute is the bean name of the created executor.  The "blocking" attribute specifies
+                whether the submitter thread will block if no space is available in this executor.
+
+                The "max-threads" element specifies the number of threads to use for this executor before
+                tasks cannot be accepted anymore.  The optional "keepalive-time" is used to specify the amount of time
+                that threads should be kept running when idle; by default threads run indefinitely.  The optional
+                "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.  The optional "handoff-executor" element specifies an executor to delegate tasks to in the
+                event that a task cannot be accepted.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="scaled-count"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+            <xs:element name="handoff-executor" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="blocking" use="optional" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A scheduled thread pool executor.  The "name" attribute is the bean name of the created executor.  The
+                "thread-factory" attribute specifies the bean name of the thread factory to use to create worker
+                threads.  The nested "max-threads" element may be used to specify the thread pool size.  The nested
+                "keepalive-time" element is used to specify the amount of time that threads should be kept running when idle.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="scaled-count"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:simpleType name="priority">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A priority which can range from 1 to 10 (inclusive).  See http://java.sun.com/javase/6/docs/api/java/lang/Thread.html#setPriority(int) for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:integer">
+            <xs:minInclusive value="1"/>
+            <xs:maxInclusive value="10"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of free-form properties.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A free-form property.  The name is required; the value is optional.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="ref">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A reference to another named service.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="scaled-count">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A scaled size designation.  The "count" attribute specifies a flat quantity.  The
+                "per-cpu" attribute specifies a quantity per available CPU, as determined by
+                java.lang.Runtime#availableProcessors().  The numbers are added together and rounded off
+                to an integer value.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="count" type="xs:float" use="optional"/>
+        <xs:attribute name="per-cpu" type="xs:float" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="time">
+        <xs:annotation>
+            <xs:documentation>
+                An amount of time.  Comprised of a time value and a unit value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="time" type="xs:integer" use="required"/>
+        <xs:attribute name="unit" type="time-unit-name" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="time-unit-name">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a unit of time.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="seconds"/>
+            <xs:enumeration value="minutes"/>
+            <xs:enumeration value="milliseconds"/>
+            <xs:enumeration value="nanoseconds"/>
+            <xs:enumeration value="hours"/>
+            <xs:enumeration value="days"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>