<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE jonas-realm PUBLIC
           "-//ObjectWeb//DTD JOnAS realm 1.0//EN"
           "http://www.objectweb.org/jonas/dtds/jonas-realm_1_0.dtd">

<!--
	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	- Define a jonas-realm.xml file for JOnAS realms
	-
	- $Id: jonas-realm.xml 8004 2006-02-13 10:27:40  0000 (Mon, 13 Feb 2006) benoitf $
	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-->

<jonas-realm>


	<!--
		-=  MEMORY REALM =-
		Define the users, groups and roles
	-->

	<jonas-memoryrealm>

		<memoryrealm name="memrlm_1">
			<roles>
				<role name="jonas-admin" description="JonasAdmin role" />
				<role name="tomcat" description="Used in examples" />
				<role name="jetty" description="Used in examples" />
				<role name="role1"
					description="Role used in jonas tests" />
				<role name="role2"
					description="Role used in jonas tests" />
				<role name="administrator"
					description="Role used in petstore" />
				<role name="jaas"
					description="Role used in the jaasclient example" />
				<role name="ws-security"
					description="Role used in the ws/webendpoint example" />
			</roles>

			<groups>
				<group name="jonas"
					roles="jonas-admin,tomcat,jaas,ws-security"
					description="All authorization" />
			</groups>

			<users>
				<user name="tomcat" password="tomcat"
					roles="tomcat,jonas-admin,manager" />
				<user name="jetty" password="jetty" roles="jetty" />
				<!-- Example of a crypt password : password for jadmin is : jonas -->
				<user name="jadmin"
					password="{MD5}nF3dVBB3NPfRgzWlJFwoaw==" roles="jonas-admin" />
				<user name="jps_admin" password="admin"
					roles="administrator" />
				<user name="supplier" password="supplier"
					roles="administrator" />
				<!-- Another crypt example in another format : password is jonas -->
				<!-- JonasAdmin uses name="jonas" password="jonas" -->
				<user name="jonas"
					password="SHA:NaLG uYfgHeqth qQBlyKr8FCTw=" groups="jonas" />
				<user name="principal1" password="password1"
					roles="role1" />
				<user name="principal2" password="password2"
					roles="role2" />
			</users>
		</memoryrealm>

		<!-- Other memoryrealm are possible
			the following use a encrypted password (here password = test)
		-->
		<!--
			<memoryrealm name="memrlm_2">
			<users>
			<user name="test" password="{MD5}CY9rzUYh03PK3k6DJie09g==" groups="test" />
			<user name="##DN##CN=whale, OU=ObjectWeb, O=JOnAS, L=JOnAS, ST=JOnAS, C=ORG" password="" roles="tomcat,jetty" />
			</users>
			</memoryrealm>
		-->

	</jonas-memoryrealm>

	<!--
		-=  DATASOURCE REALM =-
		Define the configuration to use data from a datasource.
		
	-->

	<!--
		<jonas-dsrealm>
		<dsrealm name="dsrlm_1"
		dsName="jdbc_1"
		userTable="realm_users" userTableUsernameCol="user_name" userTablePasswordCol="user_pass"
		roleTable="realm_roles" roleTableUsernameCol="user_name" roleTableRolenameCol="role_name"
		/>
		
		<dsrealm name="dsrlm_2"
		dsName="jdbc_2"
		userTable="realm_users" userTableUsernameCol="user_name" userTablePasswordCol="user_pass"
		roleTable="realm_roles" roleTableUsernameCol="user_name" roleTableRolenameCol="role_name"
		/>
		
		</jonas-dsrealm>
		
	-->

	<!--
		-= REALM FOR OLSTORE EXAMPLE =-
		Define the datasource realm information for the olstore example application. Defines the
		columns where usernames, passwords and roles are placed. These tables need populating.
		Refer to http://.........../olstore/general/help.jsp for populating instructions after deploying
		the olstore application.
	-->

	<jonas-dsrealm>
		<dsrealm name="dsrlm_1" dsName="bonita"
			userPrincipalsQuery="select password from BnUser where name=?"
			userRolesQuery="select r.name, 'Roles' from BnAuthRole r, BNAUTHROLE_BNUSER ru,
  BnUser u where u.name=? and u.id=ru.BnUser_id and ru.BnAuthRole_id=r.id" />
		<dsrealm name="olstorerlm_1" dsName="jdbc_1"
			userTable="olstore_user" userTableUsernameCol="username"
			userTablePasswordCol="passwd" roleTable="olstore_user"
			roleTableUsernameCol="username" roleTableRolenameCol="role" />

	</jonas-dsrealm>


	<!--
		-=  LDAP REALM =-
		Define the configuration to use data from an ldap server.
		The first is a minimal example
		The second -> compare mode
		need to put the principal and credential of the ldap admin
	-->
	<!--
		<jonas-ldaprealm>
		<ldaprealm name="ldaprlm_1"
		baseDN="dc=jonas,dc=objectweb,dc=org"
		/>
		
		
		<ldaprealm name="ldaprlm_2"
		securityPrincipal="cn=Admin,dc=jonas,dc=objectweb,dc=org"
		securityCredentials="JOnAS"
		baseDN="dc=jonas,dc=objectweb,dc=org"
		authenticationMode="compare"
		/>
		
		</jonas-ldaprealm>
	-->

</jonas-realm>