torquebox-server 2.0.3-java → 2.1.0-java

data/jboss/docs/schema/jboss-as-mod-cluster_1_0.xsd

@@ -110,6 +110,11 @@
         <xs:documentation>Time to live (in seconds) for idle connections above smax.</xs:documentation>
       </xs:annotation>
     </xs:attribute>
+    <xs:attribute name="domain" type="xs:string" use="optional" >
+      <xs:annotation>
+        <xs:documentation>Load balancing group</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
   </xs:complexType>
 
   <!-- general SSL definitions -->

data/jboss/docs/schema/jboss-as-mod-cluster_1_1.xsd

@@ -0,0 +1,253 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2011, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+  targetNamespace="urn:jboss:domain:modcluster:1.1"
+  xmlns="urn:jboss:domain:modcluster:1.1"
+  elementFormDefault="qualified"
+  attributeFormDefault="unqualified"
+  version="1.0"
+  >
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="mod-cluster-config" type="mod-cluster-configType" minOccurs="0" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="mod-cluster-configType">
+    <xs:sequence>
+      <!-- Simple load-provider or a dynamic one -->
+      <xs:choice minOccurs="0">
+        <xs:element name="simple-load-provider" type="simple-load-providerType"/>
+        <xs:element name="dynamic-load-provider" type="dynamic-load-providerType"/>
+      </xs:choice>
+      <xs:element name="ssl" type="sslType"  minOccurs="0" maxOccurs="1"/>
+    </xs:sequence>
+
+    <!-- Get the actual advertiseGroupAddress / advertisePort from advertiseSocket -->
+    <xs:attribute name="advertise-socket" type="xs:string" use="optional"/>
+    <xs:attribute name="proxy-list" type="xs:string" use="optional"/>
+    <xs:attribute name="proxy-url" type="xs:string" use="optional"/>
+    <xs:attribute name="balancer" type="xs:string" use="optional">
+      <xs:annotation>
+        <xs:documentation>The balancer name. All nodes of a cluster have to use the same value.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="advertise" type="xs:boolean" use="optional" default="true"/>
+    <xs:attribute name="advertise-security-key" type="xs:string" use="optional"/>
+    <xs:attribute name="sticky-session-force" type="xs:boolean" use="optional" default="true"/>
+    <xs:attribute name="sticky-session-remove" type="xs:boolean" use="optional" default="false"/>
+    <xs:attribute name="sticky-session" type="xs:boolean" use="optional" default="true"/>
+
+    <!-- mod_cluster parameters that describe node behaviour -->
+    <xs:attribute name="excluded-contexts" type="xs:string" use="optional" default="ROOT,invoker,jbossws,juddi,console" />
+    <xs:attribute name="auto-enable-contexts" type="xs:boolean" use="optional" default="true" />
+    <xs:attribute name="stop-context-timeout" type="xs:int" use="optional" default="10">
+      <xs:annotation>
+        <xs:documentation>The amount of time in seconds for which to wait for clean shutdown of a context.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="socket-timeout" type="xs:int" use="optional" default="20">
+      <xs:annotation>
+        <xs:documentation>Number of seconds to wait for a response from an httpd proxy to MCMP commands before timing out, and flagging the proxy as in error.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="node-timeout" type="xs:int" use="optional" default="-1">
+      <xs:annotation>
+        <xs:documentation>Timeout (in seconds) for proxy connections to a node. That is the time mod_cluster will wait for the back-end response before returning error.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="max-attempts" type="xs:int" use="optional" default="1">
+      <xs:annotation>
+        <xs:documentation>Number of times an httpd proxy will attempt to send a given request to a worker before giving up.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="flush-packets" type="xs:boolean" use="optional" default="false">
+      <xs:annotation>
+        <xs:documentation>Enables/disables packet flushing.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="flush-wait" type="xs:int" use="optional" default="-1">
+      <xs:annotation>
+        <xs:documentation>Time to wait before flushing packets in millseconds.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="ping" type="xs:int" use="optional" default="10">
+      <xs:annotation>
+        <xs:documentation>Time (in seconds) in which to wait for a pong answer to a ping.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="smax" type="xs:int" use="optional" default="-1">
+      <xs:annotation>
+        <xs:documentation>Soft maximum idle connection count.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="ttl" type="xs:int" use="optional" default="-1">
+      <xs:annotation>
+        <xs:documentation>Time to live (in seconds) for idle connections above smax.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="load-balancing-group" type="xs:string" use="optional" >
+      <xs:annotation>
+        <xs:documentation>Load balancing group</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="connector" type="xs:string" use="required">
+      <xs:annotation>
+        <xs:documentation>The web connector on which mod_cluster will operate.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <!-- general SSL definitions -->
+  <xs:complexType name="sslType">
+    <xs:annotation>
+      <xs:documentation>
+        Configuration information for one SSL configuration.
+        sslCertificateEncodingAlgorithm (default value only)
+        sslKeyStoreType/sslTrustStoreType (JKS: default value only)
+        sslKeyStoreProvider/sslTrustStoreProvider (only default value).
+        sslTrustAlgorithm (only default value).
+        sslTrustMaxCertLength (5: default value only)
+      </xs:documentation>
+    </xs:annotation>
+    <xs:attribute name="key-alias" type="xs:string" use="optional" default="jboss">
+      <xs:annotation>
+        <xs:documentation>sslKeyAlias The alias of the key holding the client certificates in the key store.</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="password" type="xs:string" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          sslKeyStorePassword/sslTrustStorePassword Password granting access to the key store and trust store.
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="certificate-key-file" type="xs:string" use="optional" default="${user.home}/.keystore">
+      <xs:annotation>
+        <xs:documentation>
+          sslKeyStore: That is the keystore name here.
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="cipher-suite" type="xs:string" use="optional" default="ALL">
+      <xs:annotation>
+        <xs:documentation>
+          sslCiphers: comma separated list of encryption ciphers the configuration is allowed to use, that MUST NOT be
+          the JVM default in of JSSE as contains weak ciphers.
+          that is SSLCipherSuite when using OpenSSL (APR).
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="protocol" default="ALL" type="SSlProtocolType">
+      <xs:annotation>
+        <xs:documentation>
+          sslProtocol: Overrides the default SSL socket protocol.
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="ca-certificate-file" type="xs:string" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          sslTrustStore location of the file containing the trust store.
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="ca-revocation-url" type="xs:string" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          sslCrlFile A file or URL to get the revocation list.
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="SSlProtocolType">
+    <xs:restriction base="xs:token">
+        <xs:enumeration value="SSLv2"/>
+        <xs:enumeration value="SSLv3"/>
+        <xs:enumeration value="TLSv1"/>
+        <xs:enumeration value="SSLv2+SSLv3"/>
+        <xs:enumeration value="ALL"/>
+    </xs:restriction>
+  </xs:simpleType>
+
+  <!-- <simple-load-provider load="1"/> -->
+  <xs:complexType name="simple-load-providerType">
+    <xs:attribute name="factor"  type="xs:int" use="optional" default="1" />
+  </xs:complexType>
+
+  <!-- Something like.
+       <dynamic-load-provider history="10" decay="2">
+           <load-metric type="cpu" weight="2" capacity="1"/>
+           <load-metric type="sessions" weight="1" capacity="512"/>
+            ...
+       </dynamic-load-provider>
+    -->
+  <xs:complexType name="dynamic-load-providerType">
+    <xs:choice minOccurs="0" maxOccurs="unbounded">
+      <xs:element name="load-metric" type="load-metricType"/>
+      <xs:element name="custom-load-metric" type="custom-load-metricType"/>
+    </xs:choice>
+    <xs:attribute name="history" type="xs:int" use="optional" default="9" />
+    <xs:attribute name="decay" type="xs:int" use="optional" default="2"/>
+  </xs:complexType>
+
+  <xs:complexType name="common-load-metricType" abstract="true">
+    <xs:attribute name="weight" type="xs:int" use="optional" default="1"/>
+    <xs:attribute name="capacity" type="xs:double" use="optional" default="1.0"/>
+  </xs:complexType>
+
+  <xs:complexType name="load-metricType">
+    <xs:complexContent>
+      <xs:extension base="common-load-metricType">
+        <xs:attribute name="type" type="loadMetricEnum" use="required"/>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:complexType name="custom-load-metricType">
+    <xs:complexContent>
+      <xs:extension base="common-load-metricType">
+        <xs:attribute name="class" type="xs:string" use="required"/>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:simpleType name="loadMetricEnum">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="cpu"/>
+      <xs:enumeration value="mem"/>
+      <xs:enumeration value="heap"/>
+      <xs:enumeration value="sessions"/>
+      <xs:enumeration value="requests"/>
+      <xs:enumeration value="send-traffic"/>
+      <xs:enumeration value="receive-traffic"/>
+      <xs:enumeration value="busyness"/>
+    </xs:restriction>
+  </xs:simpleType>
+
+</xs:schema>

data/jboss/docs/schema/jboss-as-naming_1_2.xsd

@@ -0,0 +1,130 @@
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2011, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:naming:1.2"
+           xmlns="urn:jboss:domain:naming:1.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.2">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                Naming subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="bindings" type="bindingsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote-naming" type="remote-namingType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="remote-namingType">
+        <xs:annotation>
+            <xs:documentation>
+                This element activates the remote naming server, that allows access to items bound in the java:jboss/exported
+                JNDI context.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="bindingsType">
+        <xs:sequence>
+            <xs:element name="simple" type="simpleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="object-factory" type="objectFactoryType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="lookup" type="lookupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="simpleType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value to bind
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of entry to bind. If not specified defaults to java.lang.String.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="objectFactoryType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to load the JNDI entry from
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="factoryClass" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The javax.naming.spi.ObjectFactory that provides the value.
+                    Note that when getObjectInstance is invoked the first Object parameter
+                    will be equal to the JNDI name of this binding. All other parameters will
+                    be null.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="lookupType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lookup" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI location to lookup
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>

data/jboss/docs/schema/jboss-as-security_1_1.xsd

@@ -98,7 +98,7 @@
          <xs:element name="jsse" type="jsseType" minOccurs="0" maxOccurs="1"/>
       </xs:sequence>
       <xs:attribute name="name" type="xs:string" use="required"/>
-      <xs:attribute name="cache-type" type="xs:string" use="optional"/>
+      <xs:attribute name="cache-type" type="cacheTypeType" use="optional"/>
    </xs:complexType>
 
    <xs:complexType name="authenticationType">
@@ -418,4 +418,18 @@
       </xs:sequence>
       <xs:attribute name="code" type="xs:string" use="optional"/>
    </xs:complexType>
+
+   <xs:simpleType name="cacheTypeType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Cache type configuration. Default value is "default".
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:restriction base="xs:token">
+         <xs:enumeration value="default"/>
+         <xs:enumeration value="infinispan"/>
+      </xs:restriction>
+   </xs:simpleType>
 </xs:schema>

data/jboss/docs/schema/jboss-as-security_1_2.xsd

@@ -0,0 +1,422 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2011, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:security:1.2"
+           xmlns="urn:jboss:domain:security:1.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.2">
+
+   <!-- The security subsystem root element -->
+   <xs:element name="subsystem" type="security-containerType" />
+
+   <!-- The security container configuration -->
+   <xs:complexType name="security-containerType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The security subsystem, used to configure authentication and authorization.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:all>
+         <xs:element name="security-management" type="securityManagementType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+      </xs:all>
+   </xs:complexType>
+
+   <!-- The security management element -->
+   <xs:complexType name="securityManagementType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The optional "deep-copy-subject-mode" attribute sets the copy mode of subjects done by the security
+                    managers to be deep copies that makes copies of the subject principals and credentials if they are
+                    cloneable. It should be set to true if subject include mutable content that can be corrupted when
+                    multiple threads have the same identity and cache flushes/logout clearing the subject in one thread
+                    results in subject references affecting other threads. Default value is "false".
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="deep-copy-subject-mode" type="xs:boolean" use="optional"/>
+   </xs:complexType>
+
+   <!-- Configuration for security domains -->
+   <xs:complexType name="securityDomainsType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Configures security domains for applications.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="security-domain" type="securityDomainType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="securityDomainType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Definition of a security domain.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:choice>
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="authentication-jaspi" type="authenticationJaspiType" minOccurs="0" maxOccurs="1"/>
+         </xs:choice>
+         <xs:element name="authorization" type="authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="acl" type="aclType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="mapping" type="mappingType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="audit" type="auditType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="identity-trust" type="identityTrustType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="jsse" type="jsseType" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="cache-type" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationJaspiType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JASPI authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module-stack" type="loginModuleStackType" maxOccurs="unbounded"/>
+         <xs:element name="auth-module" type="authModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authorizationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="policy-module" type="policyModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="aclType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="acl-module" type="aclModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="mappingType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="mapping-module" type="mappingModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="auditType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="provider-module" type="providerModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="identityTrustType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="trust-module" type="trustModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:simpleType name="module-option-flag">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    The flag attribute controls how a login module
+                    participates in the overall procedure.
+                    Required - The LoginModule is required to succeed. If it
+                    succeeds or fails, authentication still continues to proceed
+                    down the LoginModule list.
+
+                    Requisite - The LoginModule is required to succeed. If it succeeds,
+                    authentication continues down the LoginModule list. If it fails,
+                    control immediately returns to the application (authentication does not proceed
+                    down the LoginModule list).
+
+                    Sufficient - The LoginModule is  not required to succeed. If it does
+                    succeed, control immediately returns to the application (authentication
+                    does not proceed down the LoginModule list). If it fails,
+                    authentication continues down the LoginModule list.
+
+                    Optional - The LoginModule is not required to succeed. If it succeeds or
+                    fails, authentication still continues to proceed down the
+                    LoginModule list.
+
+                    The overall authentication succeeds only if
+                    all required and requisite LoginModules succeed. If a
+                    sufficient LoginModule is configured and succeeds, then only
+                    the required and requisite LoginModules prior to that
+                    sufficient LoginModule need to have succeeded for the overall
+                    authentication to succeed. If no required or requisite
+                    LoginModules are configured for an application, then at least
+                    one sufficient or optional LoginModule must succeed.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:restriction base="xs:token">
+         <xs:enumeration value="required"/>
+         <xs:enumeration value="requisite"/>
+         <xs:enumeration value="sufficient"/>
+         <xs:enumeration value="optional"/>
+      </xs:restriction>
+   </xs:simpleType>
+
+   <xs:complexType name="loginModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="propertyType">
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="value" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="loginModuleStackType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="authModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="optional"/>
+      <xs:attribute name="login-module-stack-ref" type="xs:string" use="optional"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="policyModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="aclModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="mappingModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="type" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="providerModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="trustModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="jsseType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JSSE configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+        <xs:element name="additional-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+      <xs:attribute name="keystore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="client-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="server-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="service-auth-token" type="xs:string" use="optional"/>
+      <xs:attribute name="client-auth" type="xs:boolean" use="optional"/>
+      <xs:attribute name="cipher-suites" type="xs:string" use="optional"/>
+      <xs:attribute name="protocols" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="properties">
+      <xs:sequence>
+         <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="vaultType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Vault Configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="optional"/>
+   </xs:complexType>
+</xs:schema>